Subprocessors
Last update: 2026-05-05
Subprocessors
Clear Fashion (Clothparency SAS) is committed to maintaining a public, exhaustive and up-to-date list of all sub-processors it engages in connection with personal data processing, pursuant to Article 28 of the GDPR.
This page constitutes the living list referenced in our Data Processing Agreements (DPA). Any change (addition or removal of a subprocessor) is notified to our partner clients 30 calendar days before the change takes effect, in accordance with our contractual commitments.
To be notified of changes, write to dpo@clear-fashion.com with the subject "Subprocessors notification".
Infrastructure & Hosting
| Subprocessor | HQ | Purpose | Data region | Transfer mechanism | DPA |
|---|
| Heroku (Salesforce) | United States | Application hosting, PostgreSQL database, Redis | EU — Frankfurt (eu-central-1) | EU SCC 2021/914 + EU infrastructure | Link |
| Google Cloud Storage | United States | File storage (Active Storage) | EU — europe-west | EU SCC 2021/914 + EU infrastructure | Link |
| Redis Cloud (Redis Ltd.) | United States | Application cache and queues | EU available | EU SCC 2021/914 + EU infrastructure | Link |
| Vercel | United States | SaaS partner interface hosting | EU — Frankfurt | EU SCC 2021/914 | Link |
| Fixie (Usefixie) | United States | Static outbound IPs (network proxy) | EU | EU SCC 2021/914 — proxy only, no data storage | Link |
Authentication & Security
| Subprocessor | HQ | Purpose | Data region | Transfer mechanism | DPA |
|---|
| Firebase (Google) | United States | User authentication (JWT) | EU | EU SCC 2021/914 + EU infrastructure | Link |
Monitoring & Observability
| Subprocessor | HQ | Purpose | Data region | Transfer mechanism | DPA |
|---|
| Sentry | United States | Application error tracking — anonymised technical data only | United States | EU SCC 2021/914 Module 3 — no personally identifiable data | Link |
| BetterStack | United States | Application logs | EU / US — EU infrastructure (Germany) preferred | EU infrastructure — no transfer outside EEA | Link |
| Scout APM | United States | Performance metrics | United States | Purely technical data, not personal | Link |
Artificial Intelligence
| Subprocessor | HQ | Purpose | Data region | Transfer mechanism | DPA |
|---|
| OpenAI | United States | AI pre-fill (BrandEvaluation) — mandatory human validation before publishing | United States | EU SCC 2021/914 — standard API: data not used for training | Link |
Communication & CRM
| Subprocessor | HQ | Purpose | Data region | Transfer mechanism | DPA |
|---|
| Mailchimp (Intuit) | United States | Transactional emails (Mandrill) + marketing | United States (EU available on request) | EU SCC 2021/914 — professional emails only | Link |
| Brevo (Sendinblue) | France | Transactional emails (migration under evaluation) | EU — Paris | EU hosting — no transfer outside EEA | Link |
| HubSpot | United States | CRM — partner user account synchronisation | United States (EU available) | EU SCC 2021/914 — data: name, email, account status | Link |
Analytics & Tracking
| Subprocessor | HQ | Purpose | Data region | Transfer mechanism | DPA |
|---|
| Axeptio (Ciril Group) | France | Cookie consent management (CMP) — records user choices + timestamps | EU — France | EU hosting — no transfer outside EEA | Link |
| Google Tag Manager | United States | Tag management — verified dataLayer: event/page/productCode only | United States | EU SCC 2021/914 — no personal data in DataLayer (verified) | Link |
| Google Analytics (via GTM) | United States | Audience measurement — anonymous internal user_id only | United States | EU SCC 2021/914 — no email or name transmitted (confirmed in source code) | Link |
| Hotjar | Malta (EU) | Behavioural analysis (heatmaps, recordings) | EU | EU principal establishment — GDPR directly applicable | Link |
Change log
| Date | Change |
|---|
| 05/05/2026 | Initial publication of public list + Axeptio (CMP) added |
Contact
For any questions about this list or to subscribe to change notifications:
Data Protection Officer (DPO): Clément Lucas, CTO
Email: dpo@clear-fashion.com
Address: Clothparency SAS, 15 rue de Louvois, 51100 Reims, France
