1. Purpose
This list transparently discloses the sub-processors used by CM Apps in accordance with Section 5 of the Data Processing Agreement. The list may vary by product and project; for customer-specific deployments, the applicable list is specified in the annex to the principal agreement.
2. Infrastructure and hosting
[Cloud provider A]: servers and storage. Location: [Germany / Frankfurt]. Mechanism: within the EEA / SCC. [Cloud provider B]: Türkiye region. Location: [Istanbul]. Mechanism: within Türkiye. [CDN / DNS provider]: traffic management. Location: [Global]. Mechanism: SCC.
3. Communication and support
[Email delivery service]: transactional emails. Location: [EU/US]. Mechanism: SCC / DPF. [Support and ticketing system]: customer support records. Location: [EU]. Mechanism: within the EEA. [Messaging provider]: notifications and SMS. Location: [Türkiye]. Mechanism: within Türkiye.
4. Payments and finance
[Payment institution]: subscription collection. Location: [Türkiye / EU]. Mechanism: within the relevant country. [Accounting / e-invoice integrator]: invoices and account records. Location: [Türkiye].
5. Analytics and monitoring
[Error tracking tool]: application error logs. Location: [EU]. Mechanism: within the EEA. [Product analytics]: anonymous/pseudonymous usage data. Location: [EU/US]. Mechanism: SCC.
6. Change notification
The addition or replacement of a sub-processor is announced at least [30] days in advance on this page and by email to customers that have signed a DPA. To subscribe to the notification list: [EMAIL]. Last updated: [13 September 2026].