Kupe Cloud Subprocessors
Version: v1.0.0 Last updated: April 20, 2026
This page lists the main third-party providers that Core Solutions LTD currently uses, or expects to use, to deliver Kupe Cloud services where they may process personal data on our behalf.
This list focuses on subprocessors and closely related service providers used to deliver the Kupe Cloud service. It may be updated from time to time as our infrastructure and service providers change.
1. Provider
The service provider operating Kupe Cloud is:
Core Solutions LTD
Registered in: England and Wales
Company number: 11659922
VAT number: 310885805
Registered office: 3rd Floor 86-90 Paul Street, London, United Kingdom, EC2A 4NE
For subprocessor questions, contact privacy@coresolutions.ltd.
2. Current Subprocessors
| Provider | Service | Location of processing | Data involved |
|---|---|---|---|
| Hetzner Cloud | Hosting and cloud infrastructure for the Kupe Cloud platform | European Union (Germany, Finland) | Tenant contact data, member data, service data, logs, and hosted customer-controlled platform data |
| Cloudflare | DNS, edge, security, Web Analytics, and offsite backup storage | Global edge network (US-headquartered) | Website request metadata, traffic and security data, analytics-related data, and offsite backups of platform-managed data |
| Paddle | Merchant of record, billing, invoicing, tax, and payment operations | United Kingdom (with global processing) | Billing contact details, subscription and transaction identifiers, invoice and tax data, and limited commercial records |
| Transactional email delivery for verification, invitation, and operational emails | Global (US-headquartered) | Recipient email addresses, recipient names, and the content of transactional emails sent on our behalf |
Kupe Cloud uses Authentik as self-hosted identity and access management software running on the Hetzner Cloud infrastructure listed above. Authentik is open-source software, not a separate service provider, and is therefore not a subprocessor in its own right.
3. Adding or Replacing Subprocessors
If we engage an additional subprocessor or replace an existing one, we will update this page and provide notice in line with our Data Processing Addendum, including the prior-notice period and objection process described there.
If you need the most current provider list for diligence or procurement review, contact privacy@coresolutions.ltd.
4. International Transfers
Some providers may process data outside the UK.
Where a restricted transfer occurs, Core Solutions LTD uses an appropriate transfer mechanism required by applicable law, such as an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful safeguard.
5. Changes
We may update this list from time to time as our services and providers change. The notice period and objection process for new or replacement subprocessors are set out in our Data Processing Addendum at /dpa.
6. Subprocessor Update Notifications
To receive notice of subprocessor changes by email, contact privacy@coresolutions.ltd to subscribe to subprocessor update notifications.