Subprocessors
Last Updated: 16 Sep 2026
MEETTY – FZCO (operating as TopScan) uses the third-party service providers listed on this page ("subprocessors") to deliver the TopScan platform and related services ("Service"). Each subprocessor is bound by a data processing agreement and processes data only for the purpose stated below. How we handle personal data is described in our Privacy Policy.
1. Subprocessors that process customer data
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the TopScan platform, databases and backups | All customer account and scan data | USA (Ashburn, Virginia; facility operated by Hetzner's colocation provider NTT Global Data Centers Americas, Inc.). Support and administration from Germany |
| Google LLC (Google Workspace) | Corporate email, identity and document storage; sign-in with Google for TopScan accounts | Account identifiers, support correspondence | EU / USA |
| Stripe, Inc. | Payment processing and invoicing | Billing contact details and payment data (card data is held by Stripe only) | USA / EU |
| Mailgun Technologies, Inc. (Sinch) | Transactional email: notifications, reports, alerts | Email address, notification content | USA |
| Google LLC (Google Analytics) | Website and product usage analytics | Pseudonymous usage data | USA |
| Cloudflare, Inc. | DNS, content delivery and edge security in front of topscan.me and the application | Connection metadata: IP addresses, request logs | USA, global edge network |
2. Self-hosted systems
The following systems run on infrastructure operated by TopScan and do not involve a third-party processor: GitLab (source code), YouTrack (issue tracking), Sentry (error monitoring).
3. AI services
AI services are not subprocessors of customer data. The remediation guidance shown in TopScan is generated from anonymised queries about vulnerability types and CVE identifiers only; no customer data, host names, URLs or scan results are sent to any AI provider. AI coding and analytics assistants used internally by the MEETTY engineering team process MEETTY's own source code and masked, non-identifiable data only.
4. Changes to this list
We will update this page at least 30 days before adding a new subprocessor that processes customer data. Customers may subscribe to update notifications, or ask questions about our subprocessors, by emailing legal@topscan.me.