Subprocessors

Always-active services

Scaleway, which hosts the database and compute, is a French company.

Role: Hosting of the website and the application, including event collection; database; storage of images uploaded from the editor; domain names.
Data: Requests from website visitors, signed-in users, and the script installed on customer sites; accounts (email address, name, password hash, sessions, encrypted two-factor key), workspaces and their content, API keys (hashes only), visitor events, uploaded images (public).
Company: Scaleway SAS (France), Paris Trade and Companies Register (RCS) 433 115 904
Location: Amsterdam, Netherlands (nl-ams region), in the European Union
Where to check: Scaleway legal notice (company and address)

Role: Sending Probant’s emails: sign-in emails (address confirmation, forgotten password), support emails (reply notification, alert to the team), alerts for workspaces that have an “Email” destination, and the Monday update for people who receive it.
Data: Recipient’s email address and message content: a link, single-use for sign-in; support emails contain neither the text of the messages nor the sender’s address; an alert contains the reported event (test name, aggregate figures), the Monday update the status of running tests (same figures), never any visitor data. Brevo rewrites links to count clicks and keeps a sending log.
Location: European Union: servers in France and Germany, encrypted backups in Belgium (Google Cloud), according to Brevo

An optional service receives nothing until its option is turned on in Probant’s configuration.

Role: Language model behind the editor assistant, “Ask Probant”, and session summaries; optional, available to signed-in users only.
Data: Instruction written in the editor, a compact outline of the page being edited (tags, selectors, short text excerpts), and the changes in progress; questions asked to “Ask Probant” and the workspace data that answers them (tests, computed results, ideas, metrics, rollouts); the journey of a session to summarize (pages, clicks, errors), without the visitor’s identifier.
Company: Mistral AI (France), 15 rue des Halles, 75001 Paris, France
Location: European Union by default (European API endpoint), according to Mistral
Outside the EU: Depending on the feature used, Mistral may temporarily transfer data outside the European Union to the subprocessors it publishes; its data processing agreement limits these transfers to countries the EU recognizes as adequate, or covers them with standard contractual clauses.
Activation: Only when this option is turned on in Probant’s configuration.
Where to check: Where Mistral stores data · Mistral data processing addendum

Role: Optional storage for visitor events, replacing the Postgres table when volume requires it.
Data: Visitor events: random identifier, type, test, variant, metric, value, sent and received dates.
Location: Option not in use: it is not connected in production, and visitor events stay in the Postgres database, at Scaleway, in Amsterdam.

Role: Payment for paid plans: checkout page, subscription, invoices, payment method, and cancellation (Stripe portal).
Data: Email address of the person subscribing, workspace identifier, chosen plan, and what the person enters on Stripe’s checkout page (payment method), which does not pass through Probant.
Company: Stripe Payments Europe, Ltd. (Ireland)
Location: Contract with Stripe Payments Europe, Ltd. (Ireland); data transferred to Stripe, LLC (United States), according to Stripe
Outside the EU: Stripe transfers payment data to Stripe, LLC, in the United States, under the Data Privacy Framework and, failing that, standard contractual clauses.
Activation: Only when this option is turned on in Probant’s configuration.
Where to check: Stripe data transfer addendum · Stripe and the Data Privacy Framework · Stripe data processing agreement FAQ

Role: Optional reporting of server errors, so they can be fixed.
Data: Error message and stack trace, page path (without parameters), deployed version. No headers, cookies, or request bodies; email addresses and API keys are masked in messages.
Company: Functional Software, Inc. (United States)
Location: European Union: Frankfurt (Germany), including backups, according to Sentry
Outside the EU: Whatever region is chosen, Sentry may keep the data of Probant’s Sentry account (members, settings, audit log, project descriptions) in the United States; reported errors stay in Frankfurt.
Activation: Only when this option is turned on in Probant’s configuration.
Where to check: Sentry data storage location

Probant’s commitments in the event of a change of subprocessor fall under the data processing agreement.