On the Free plan, nothing from a checked email is sent to anybody outside Jatzo except Hetzner, which runs the server.
Sub-processors of Customer Data
| Sub-processor | What it does | What it receives | Where | Transfer basis |
|---|---|---|---|---|
| Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany | Runs the server | Everything Jatzo holds | Nuremberg, Germany | UK adequacy regulations for the EEA |
| Hetzner Online GmbH, as above | Holds the off-site backups | The backups, encrypted on Jatzo's server before they leave; Hetzner does not hold the key | Finland | UK adequacy regulations for the EEA |
| Google (Web Risk) | Link reputation | The link as written in each checked email, query string included and the fragment after # removed, up to ten per email, including links in attachments and QR codes. On unless the customer switches it off: an admin turns live link reputation off for a whole workspace, and an account with no workspace turns it off for itself, and with it off nothing about that customer's links reaches Google | Several countries including the United States | Contracted with Google Cloud EMEA Limited, Dublin, Ireland, which is Google's contracting entity for a United Kingdom billing address, so the transfer Jatzo makes is to Ireland under UK adequacy for the EEA. Onward transfer to the United States is Google's, under the Cloud Data Processing Addendum, which is incorporated automatically and carries the standard contractual clauses in their United Kingdom form. Google LLC is additionally certified under the UK Extension to the EU-US Data Privacy Framework |
| Microsoft (email delivery) | Sends the emails Jatzo sends, including report PDFs and Report this to IT | The PDF, which contains the stored subject line and findings. A threat intelligence report also contains the full URL of each checked link and the detailed evidence from the check while it is still held: IP addresses, header details and short extracts of the message and its attachments. For Report this to IT, it names the original sender | Several countries including the United States | Contracted with Microsoft Limited, company number 01624297, Microsoft Campus, Thames Valley Park, Reading RG6 1WG, the entity named on Jatzo's invoices, so the transfer Jatzo makes is within the United Kingdom and needs no mechanism. Onward transfer to the United States is Microsoft's, under the Microsoft Products and Services Data Protection Addendum, which applies automatically and provides that transfers out of the United Kingdom are subject to Microsoft's standard contractual clauses together with the International Data Transfer Addendum |
| RIPE NCC | Network registry and routing, including who runs the network and the country it is registered to | A public IP address from an email's headers, its prefix and origin network. Live on paid plans: off in the software by default, switched on for this installation on 21 September 2026 | The Netherlands | UK adequacy regulations for the EEA |
| Domain registries, through RDAP | Domain registration date | A domain name only | Wherever each registry is | |
| The server's DNS resolver | Resolving names | Domain names from checked emails | Hetzner's own resolvers (185.12.64.1, 185.12.64.2 and their IPv6 equivalents), confirmed on the server on 22 September 2026 | Covered by the Hetzner rows above; no other company receives these lookups |
Recipients of account data only, where Jatzo is controller
These receive nothing from checked emails, so they are not sub-processors of Customer Data, and are listed so that the list is visibly complete.
| Recipient | What | Where |
|---|---|---|
| Microsoft (sign-in) | A sign-in code at sign-in, and a refresh token checked every 15 minutes to confirm the account still exists | Several countries including the United States |
| Stripe | What a person enters in Stripe's checkout for training purchases, if checkout is switched on | Several countries including the United States |
Spoof Check, the free public check, has no customers in this sense, so nothing it does makes a sub-processor of Customer Data.
Receive nothing about anybody
Google's and Microsoft's published signing keys; the Certificate Transparency logs the lookalike watch reads, which are read whole and never searched for a customer's name.
Changes
Jatzo gives at least thirty days' notice before adding or replacing a sub-processor, by email to each Workspace admin. A customer may object on reasonable data protection grounds within that period, as the data processing agreement sets out.