ChockOps sub-processors
Effective: 31 October 2026, version 1.0 · Hungarian version: Adatfeldolgozók
DataEdge Kft. (6724 Szeged, Bakay Nándor utca 24. D2. ép. 1. em. 13., Hungary; company reg. no. 06-09-023337) uses the processors below to provide ChockOps. For business customers whose aircraft workspace we process as a processor, they are sub-processors under section 6 and Annex 3 of the Data Processing Agreement.
Changes: we notify business customers by email at least 30 days before adding or replacing a sub-processor, and record the change in the changelog on this page. Customers may object on reasonable data-protection grounds (Data Processing Agreement, section 6).
Current processors
| Processor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus | server (VPS): application, database, uploaded files, backups | all data in the Service | Frankfurt am Main, Germany (EU) | within the EU; Hostinger Data Processing Addendum (https://www.hostinger.com/legal/dpa) |
| Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland; processing by Anthropic, PBC (USA) and its sub-processors | AI (Claude API): document classification, data extraction, summaries, email drafts, airport research, always as suggestions | content submitted to an AI feature; medical certificates only with separate explicit consent | USA (data stored in the US; inference may be routed to other regions) | EU Standard Contractual Clauses (Decision (EU) 2021/914, Modules 2 and 3) in Anthropic's Data Processing Addendum; transfer impact assessment. By default Anthropic deletes API inputs and outputs within 30 days and does not train on them |
| Mailgun Technologies, Inc. (Sinch group, "Sinch Email"), EU region | email: receives mail sent to @chockops.io addresses and forwards it to our mailbox (relay only, no storage beyond transit), and sends system emails (sign-up confirmation, password reset, invitations, account notices) from no-reply@chockops.io | email addresses, message content, attachments, delivery events (Mailgun keeps delivery logs for up to 30 days) | EU region (Google Cloud, Germany and Belgium); limited account data (not the messages) in the USA | Sinch data protection agreement with SCCs (Modules 2 and 3); in addition, according to Mailgun's privacy notice, Mailgun Technologies, Inc. participates in the EU-US Data Privacy Framework |
| Rackhost Zrt., 6722 Szeged, Tisza Lajos körút 41., Hungary | mailboxes: the mailbox receiving @chockops.io mail, the airport/handling correspondence mailbox (flyops@dataedge.io, SMTP/IMAP), and receiving mail forwarded to an aircraft | email addresses, message content, attachments | Hungary (EU) | within the EU |
Planned, not yet used
| Processor | Purpose | From |
|---|---|---|
| EU backup storage provider (S3-compatible object storage with an EU data centre; provider not yet chosen) | encrypted off-site backups | only through the procedure above: we publish the provider, location and retention periods here and notify business customers at least 30 days before we start using it |
Paddle.com Market Limited (30 Old Bailey, London EC4M 7AU, United Kingdom) will handle payment, invoicing and tax as reseller and Merchant of Record once paid plans start. It processes payment data as an independent controller, so it is not a processor. The beta is free and we process no payment data; we will announce paid plans at least 30 days in advance.
Not processors, but may receive data
- People you send data to (airports, handlers, maintenance organisations, instructors, workspace members): independent controllers.
- Browser push services (Google, Mozilla, Apple, Microsoft, chosen by your browser): the notification content is end-to-end encrypted.
- Map tiles: OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom;
tile.openstreetmap.org): your browser loads the map directly, so the OSMF sees your IP address, user agent and the area viewed. Independent controller; the European Commission's adequacy decision for the United Kingdom applies. We use this provider during the beta and will review the choice of map provider before public launch. - Flight-data sources (api.adsbdb.com, OpenSky Network, Flightradar24): supported by the software but not enabled in the Service at present. If we enable one, we will update this list and the privacy policy first; our server would send them only an aircraft registration or ICAO24 address and a time window, never your identity.
Changelog
| Date | Change |
|---|---|
| 2026-10-31 | first publication (1.0) |