Who handles your data
These are the outside companies that store or handle, on our behalf, the data of the people who use Histree: what each does, where, and the terms it works under. We check each of them once a year. Before we add one or change what one does, we update this page, and the changes are listed at the end.
Companies that handle your data for us
DigitalOcean
Hosts the server the app and its data live on, the nightly backups beside it, and the copies we try changes on.
Where: London (its LON1 data centre); the company is in the United States
Transfers out of the UK and EU: Support from the United States, under the EU-US Data Privacy Framework and its UK Extension, or the EU's standard contract clauses and the UK Addendum if that lapses.
Its data terms: Data Processing Agreement. Part of its terms of service from sign-up; nothing to sign.
Certified: SOC 2 Type II, SOC 3, CSA STAR Level 1, ISO 27001 (the LON1 data centre, not DigitalOcean itself)
Last checked: 20 October 2026
Cloudflare
Keeps encrypted copies of the backups, which it cannot read, and runs the check that a person, not a robot, is signing up or asking for a new password, and in doing so Cloudflare sees the visitor's internet address and browser, as any site it serves would, and uses what it saw to improve the check.
Where: R2 storage held to the EU jurisdiction, which holds every backup; the bot check at the nearest Cloudflare site; the company is in the United States
Transfers out of the UK and EU: The EU's standard contract clauses with the UK Addendum, and the EU-US Data Privacy Framework with its UK Extension.
Its data terms: Customer Data Processing Addendum. Part of its self-serve terms from sign-up; nothing to sign. The bot check also has its own privacy addendum.
Certified: ISO 27001, ISO 27018, ISO 27701, SOC 2 Type II, PCI DSS Level 1 (some products)
Last checked: 20 October 2026
Brevo
Sends the app's account emails: sign-in codes, confirmations, password resets and new sign-in alerts.
Where: France and Belgium (OVH and Google Cloud); the company is in France
Transfers out of the UK and EU: Its own sub-processors outside the EU, under the EU's standard contract clauses.
Its data terms: Data Processing Agreement (appendix 3 of its terms). Part of its terms of service from sign-up; nothing to sign.
Certified: ISO 27001
Last checked: 18 October 2026
Anthropic
Runs the AI assistant we build the app with, which sees a user's records only if we let it while looking into a problem.
Where: United States
Transfers out of the UK and EU: The data goes to the United States under its consumer terms and privacy policy, with no data agreement of ours.
Its data terms: Consumer Terms. Our claude.ai Max plan; no separate data agreement.
Certified: ISO 27001, ISO 42001, SOC 2 Type II (commercial products)
Last checked: 19 October 2026
Hetzner
Hosts the computer we build the app on: no user's records are kept there, and one is seen there only while we look into a problem.
Where: Nuremberg, Germany; the company is in Germany
Its data terms: Data Processing Agreement. Agreed in the account (accounts.hetzner.com, Data protection), with the kinds of data listed; Hetzner signs none by hand.
Certified: ISO 27001 (its Nuremberg, Falkenstein and Helsinki data centres)
Last checked: 19 October 2026
Keeps the emails people send to this site's own addresses, such as privacy@, and our replies.
Where: Google's data centres worldwide; the company is in the United States, with Google Cloud EMEA Limited, in Ireland, as the contracting company for UK and EU customers
Transfers out of the UK and EU: The EU's standard contract clauses in the addendum, and Google's alternative transfer solution, the EU-US Data Privacy Framework with its UK Extension.
Its data terms: Cloud Data Processing Addendum. Part of the Google Workspace agreement; nothing to sign.
Certified: ISO 27001, ISO 27017, ISO 27018, SOC 2, SOC 3
Last checked: 8 November 2026
Planned
Not used yet. Each starts only once this page says so.
Stripe
Will take payments, once the app has paid plans.
Where: United States and Ireland
Transfers out of the UK and EU: Its Data Transfers Addendum: the Data Privacy Framework with its UK Extension, the EU's standard contract clauses and the UK's International Data Transfer Addendum.
Its data terms: Data Processing Agreement. Part of its services agreement from sign-up; nothing to sign.
Certified: PCI DSS Service Provider Level 1, SOC 1, SOC 2 Type II
Changes
- 8 November 2026: Google listed: it keeps the email people send to each site's own addresses, such as privacy@, and was missing from this list until now.
- 24 October 2026: Cloudflare's earlier backup storage, in Western Europe, is deleted: every backup is now kept only in storage held to its EU jurisdiction.
- 19 October 2026: Cloudflare now keeps the encrypted off-site backups in storage held to its EU jurisdiction; until its earlier bucket is deleted, copies of the earlier backups stay there too, in Western Europe.
- 19 October 2026: Hetzner's data agreement confirmed in place, and Anthropic's terms named as they are: its consumer terms.
- 18 October 2026: The list is first published.