Sub-processors and Other Recipients
Effective date: 19 October 2026
LedgerLink is a service of VoltStation B.V. (Netherlands Chamber of Commerce number 97250325), Straatweg 29, 8535 WG Follega, the Netherlands. For questions about data processing: support@ledgerlink.nl.
This page distinguishes between sub-processors that process personal data on instructions in connection with the Moneybird accounting assistant, providers used for our own business operations, and independent controllers. A company may have different roles for different processing activities. The precise contracting entity and applicable international transfer arrangements also depend on the relevant account, product and contract.
1. Infrastructure and services
| Provider | Service and potential personal data | Role and processing location |
|---|---|---|
| Amazon Web Services (AWS) | API, functions, task processing, secure storage of keys, message queues and technical logging. Once activated, Amazon Bedrock may process relevant AI inputs and outputs. AWS SES may send service messages following separate activation. | Processor/sub-processor for data processed on instructions. The core service is configured in Frankfurt (Germany); Bedrock is restricted to a selected EU inference profile for the AI feature. Other services and support are not necessarily located exclusively within the EEA. |
| Neon | PostgreSQL database containing user, administration, conversation, authorisation, usage and execution data. Sensitive fields are partly encrypted at the application level; technical metadata may be readable. | Processor/sub-processor for storage and processing. The core database is configured in Frankfurt (Germany); supporting services may involve other locations. |
| Clerk | Sign-in, accounts, verified email addresses, sessions, authentication factors and profile data. | Identity service/processor for VoltStation's own account purposes; depending on the data flow, also relevant to services provided to customers. International processing is possible. |
| Vercel | Hosting of the public website and web application; technical browser and request metadata. For accounting features, the browser communicates with LedgerLink's separate API. | Hosting service/processor for relevant website and request data. Edge and supporting processing may take place outside the EEA. |
2. Payments, domain and communications
| Provider | Service and potential personal data | Role and processing location |
|---|---|---|
| Stripe | Checkout, subscription management, payment details, invoice data, address, tax identifiers and payment status. | Processor for certain services and independent controller for certain statutory, fraud-prevention and payment service purposes, among others. International processing is possible. |
| Cloudflare | DNS management and Email Routing for incoming email sent to support@ledgerlink.nl; this may involve email addresses, metadata and message content. DNS-only configuration does not in itself mean that Cloudflare acts as a reverse proxy for ordinary website content. | Service provider/processor where applicable for communications and DNS. Processing or routing may take place internationally. |
| Google (Gmail) | Receipt and handling of support and privacy correspondence forwarded by Cloudflare to a mailbox operated by VoltStation. | Recipient/service provider for our own customer correspondence; the applicable contractual arrangement and any data processing agreement depend on the type of Google account used. Processing exclusively within Europe is not promised. |
| Brevo | Sending replies from support@ledgerlink.nl, involving message content, email addresses and delivery metadata. | Service provider/processor for customer communications. Brevo is a European provider; processing and supporting services must be assessed for the specific product in use. |
AWS SES has been prepared and used in the tested staging environment for transactional service messages and account-deletion confirmation tests. Production use remains subject to separate activation and verification. When enabled, AWS processes the recipient address, necessary message content and delivery or error metadata. The prepared sending process does not use open or click tracking.
3. Other relationships
Moneybird is the accounting provider chosen by the customer. Using the customer's authorisation, LedgerLink accesses that administration, reads data or executes changes after separate approval. Moneybird is therefore not necessarily a sub-processor independently selected by VoltStation for the accounting assignment. The privacy policy and contractual relationship between the customer and Moneybird remain relevant.
Anthropic develops the Claude models that may be made available for the intended AI feature through Amazon Bedrock. Model requests are sent through AWS, not through a separate direct Claude account held by LedgerLink. Whether and in what capacity a model developer receives data depends on the applicable Bedrock service terms and model implementation; this page does not imply that prompts are sent directly to Anthropic.
When official public sources are consulted within defined limits, the websites visited may receive the selected public topic and ordinary technical request metadata. Full private questions or Moneybird records are not submitted as search queries. GoDaddy is the domain registrar, not the application host.
4. International transfers and security
Some of these providers have suppliers or support services outside the European Economic Area. Insofar as Chapter V GDPR applies, a valid transfer basis is required, such as an adequacy decision or applicable standard contractual clauses, with supplementary measures where necessary. The contracts and safeguards actually applicable are assessed for each provider and product. For further information about safeguards relating to specific processing, please email support@ledgerlink.nl.
Listing a provider on this page does not guarantee that it operates exclusively in the region identified, that every listed party is a sub-processor for all personal data, or that a feature currently disabled has already been activated.
5. Changes to sub-processors
Where we intend to engage a new or replacement sub-processor for data processed on instructions, we will notify business customers at least thirty days in advance through an appropriate direct contact channel. The Customer may submit a reasoned objection based on data protection risks to support@ledgerlink.nl. The procedure, exceptions for demonstrably necessary urgent changes, and the right to terminate in the event of an unresolved justified objection are set out in the Data Processing Agreement (https://ledgerlink.nl/dpa). Inclusion in this list does not constitute evidence that all applicable provider agreements and international transfer mechanisms have already been verified.
Other documents: Privacy Notice (https://ledgerlink.nl/privacy) · Terms and Conditions (https://ledgerlink.nl/terms) · Data Processing Agreement (https://ledgerlink.nl/dpa).