Sub-processors and service providers
This page lists every third party that processes personal data for Fabrixa B.V., where it processes that data and under which transfer mechanism. Table A covers the providers that may handle order data of our Customers and their End Customers (they are the sub-processors under our Data Processing Addendum). Table B covers tooling for this website and for Customer accounts.
Last updated: 22 October 2026
Table A — Sub-processors for Customer and End Customer data (DPA)
| Provider | Service | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting of www.fabrixa.com and the platform at account.fabrixa.com, backups | All platform data | Germany (EU) | Not applicable (EU) |
| Cloudflare, Inc. | CDN, DDoS protection, edge caching, edge workers for help.fabrixa.com and the API gateway | Traffic in transit; request metadata | Global edge network; US company | Standard Contractual Clauses |
| Print and fulfilment partners | Production, packing and dispatch of orders | Recipient name, delivery address, order contents, artwork | Portugal, Spain, the Netherlands (EU) | Not applicable (EU); partner name disclosed per order on request under NDA |
| Shipping carriers (DHL, GLS and other carriers depending on destination) | Parcel transport and delivery notifications | Recipient name, address, phone/e-mail where required | EU and destination country | Carrier’s own terms; non-EU destinations only when the End Customer is located there |
| Anthropic, PBC | AI assistant used by authorised Fabrixa staff for support and operations | Account, order and support data staff submit for a task; may include recipient names and addresses; never payment data or passwords | United States | Standard Contractual Clauses under Anthropic’s Commercial Terms and DPA; no model training on our data |
| Google Ireland Ltd (Google Workspace) | E-mail, documents and support communication | Support conversations, which may contain order data | EU data centres | Not applicable (EU); SCCs for any US support access |
| Engineering and platform operations partner | Development, maintenance and incident support of account.fabrixa.com | Access to production data when needed for support and fixes | Ukraine | Standard Contractual Clauses; name disclosed on request under NDA |
Table B — Service providers for the website and Customer accounts
| Provider | Service | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Mollie B.V. | Payments and wallet top-ups (independent controller for the payment transaction) | Payer name, payment details, amount | Netherlands (EU) | Not applicable (EU) |
| e-Boekhouden.nl | Invoicing and accounting | Customer billing details, invoices | Netherlands (EU) | Not applicable (EU) |
| DeepL SE | Machine translation of website text | Website strings; no account or order data | Germany (EU) | Not applicable (EU) |
| Google Ireland Ltd | Google Analytics 4, loaded only after consent | Usage data, truncated IP, pages viewed | EU / US | Standard Contractual Clauses |
| Microsoft Ireland Operations Ltd | Microsoft Clarity session analytics; currently loads independently of the cookie choice, under legal review (see Cookie Policy) | Interaction data, pages viewed; form input masked | EU / US | Standard Contractual Clauses |
| Apollo, Inc. | Company-level visitor identification for sales follow-up | IP address, user-agent, referrer, pages viewed | United States | Standard Contractual Clauses |
| Intuit Inc. (Mailchimp) | Newsletter, only for subscribers | Name and e-mail address of subscribers | United States | Standard Contractual Clauses |
How we notify changes
Before we add or replace a sub-processor in Table A, we publish the change here and e-mail the account owner of every active Customer account at least 30 days in advance. Customers may object under clause 6.4 of the DPA within those 30 days by writing to privacy@fabrixa.com. Changes to Table B are published here and reflected in the Privacy Policy. To receive change notices at an additional address, e-mail privacy@fabrixa.com.
Change log
| Date | Change |
|---|---|
| 22 October 2026 | First publication. Added relative to the Privacy Policy table of 15 May 2026: Anthropic, PBC (AI assistant), Google Analytics 4, Microsoft Clarity, Mailchimp, Mollie, e-Boekhouden and the engineering partner (Ukraine); Hetzner now also covers account.fabrixa.com. |
Need help understanding any of this?
Talk to a real human about how Fabrixa handles your data — or check the pricing and FAQs.