Data protection

Processors and other data recipients

Current overview of organisations that process or receive personal data for Solarstream or on our customers’ instructions.

Last updated: August 31, 2026

This overview supplements our privacy notice. It is updated when operational details change, without automatically creating a new version of the privacy notice. Material changes to the purpose, data categories, recipient category or international transfer continue to undergo legal review and are communicated separately.

The information is generated from Solarstream’s reviewed record of processing activities and central recipient register.

Supabase Inc.

Processor
Purpose
Application database, authentication and file storage
Data categories
  • Account, user and contact information
  • Login, session and MFA data
  • Application and business data
  • Files and attachments
  • Communication data
Processing location
Zurich, Switzerland
Transfer safeguard
Contractual safeguards; international transfers only with an applicable safeguard
Contractual basis
Data processing agreement concluded

Vercel Inc.

Processor
Purpose
Hosting and server-side delivery of the application
Data categories
  • IP address, browser and device data
  • Technical log and error data
  • Information Submitted Through the Website
Processing location
Frankfurt, Germany
Transfer safeguard
Adequate level of data protection in the EU and contractual protective measures
Contractual basis
Covered by verified provider conditions or contract documents

PostHog Inc.

Processor
Purpose
Product usage, error analysis and application improvement
Data categories
  • Account, user and contact information
  • Usage and Analytics Data
  • IP address, browser and device data
Processing location
Frankfurt, Germany
Transfer safeguard
Adequate level of data protection in the EU and contractual protective measures
Contractual basis
Data processing agreement concluded

Microsoft Corporation (Microsoft 365 / Graph API)

Processor
Purpose
Email, calendar, and contact features for connected Microsoft 365 accounts
Data categories
  • Email content and metadata
  • Email attachments
  • Contact details
  • Calendar events and participant data
  • OAuth tokens and connection identifiers
Processing location
Region of the customer's Microsoft 365 tenant
Transfer safeguard
Provider conditions and applicable guarantees for international transfers
Contractual basis
Contractual basis checked

ElectricSQL

Processor
Purpose
Synchronization of application data for offline use
Data categories
  • Application and business data
  • Account, user and contact information
  • Project and lead data
  • Task and scheduling data
Processing location
Ireland (EU) or self-hosted in Zurich, Switzerland
Transfer safeguard
Processing in Switzerland or in a country with an adequate level of data protection
Contractual basis
Contractual basis under review

Supabase Auth (GoTrue)

Processor
Purpose
Login, session management and multi-factor authentication
Data categories
  • Account, user and contact information
  • Login, session and MFA data
  • IP address, browser and device data
Processing location
Zurich, Switzerland
Transfer safeguard
Contractual safeguards; international transfers only with an applicable safeguard
Contractual basis
Data processing agreement concluded

Supabase Storage (S3)

Processor
Purpose
Storage of files uploaded by users
Data categories
  • Files and attachments
  • Project and lead data
  • Account and User Identifications
Processing location
Zurich, Switzerland
Transfer safeguard
Contractual safeguards; international transfers only with an applicable safeguard
Contractual basis
Data processing agreement concluded

Infomaniak SA (Email AI Analysis)

Processor
Purpose
AI-powered analysis of individual emails and creation of suggestions
Data categories
  • Email content and metadata
  • Contact details
  • Project and lead data
Processing location
Carouge GE, Switzerland
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Covered by verified provider conditions or contract documents

Browserbase Inc.

Processor
Purpose
Preparation and submission of construction notifications via authority portals
Data categories
  • Contact details
  • Project and lead data
  • Files and attachments
  • IP address, browser and device data
Processing location
Region to be confirmed before productive use
Transfer safeguard
Productive use remains blocked until documented contractual and transfer law checks have been carried out
Contractual basis
To be completed and documented before production activation

Infomaniak SA (Project/Lead Creation AI)

Processor
Purpose
Extraction of project, lead, contact and address data from provided content
Data categories
  • Texts and document excerpts provided by users
  • Contact details
  • Project and lead data
Processing location
Carouge GE, Switzerland
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Covered by verified provider conditions or contract documents

Slack Technologies LLC (Salesforce, Inc.)

Processor
Purpose
Sync notifications and messages with Slack workspaces
Data categories
  • OAuth tokens and connection identifiers
  • Communication data
  • Project and lead data
  • Account and User Identifications
Processing location
Provider managed infrastructure, including US
Transfer safeguard
Swiss–US Data Privacy Framework and contractual protection measures
Contractual basis
Covered by verified provider conditions or contract documents

Upstash, Inc.

Processor
Purpose
Short-term cache, rate limiting, and securing OAuth operations
Data categories
  • Account and User Identifications
  • Ephemeral OAuth and security states
  • Technical metadata
Processing location
Frankfurt, Germany
Transfer safeguard
Adequate level of data protection in the EU and contractual protective measures
Contractual basis
Contractual basis under review

Unkey Labs, Inc.

Processor
Purpose
Issuance, verification and revocation of API keys
Data categories
  • Account and User Identifications
  • Hashed API key identifiers and permission data
Processing location
Region to be confirmed before productive use
Transfer safeguard
Processing location and applicable transfer guarantees under review
Contractual basis
Contractual basis under review

Vonage / Nexmo (Vonage Holdings Corp.)

Processor
Purpose
Sending and delivery status of WhatsApp messages
Data categories
  • Telephone numbers
  • Communication data
  • Message content and delivery data
Processing location
Region to be confirmed before productive use
Transfer safeguard
Standard contractual clauses and contractual safeguards
Contractual basis
Contractual basis under review

Google Cloud EMEA Limited / Google Ireland Limited / Google LLC (Google Maps Platform)

Independent controller
Purpose
Address search, geocoding and map display
Data categories
  • Address details
  • Location and geodata
  • IP address, browser and device data
Processing location
Global infrastructure, including USA
Transfer safeguard
Swiss–US Data Privacy Framework with Controller SCC as a fallback guarantee
Contractual basis
Controller-to-controller terms; no data processing agreement

Microsoft Corporation (Azure AI Document Intelligence)

Processor
Purpose
Recognition of text, form fields and layout in documents
Data categories
  • Documents
  • Project and lead data
  • Personal data contained in documents
Processing location
Azure Switzerland North, Switzerland
Transfer safeguard
Provider conditions and applicable guarantees for international transfers
Contractual basis
Contractual basis checked

Infomaniak SA (Audio Transcription)

Processor
Purpose
Converting voice recordings to text
Data categories
  • Audio recordings
  • Voice data
  • Communication data
Processing location
Carouge GE, Switzerland
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Covered by verified provider conditions or contract documents

Kickbox Inc.

Processor
Purpose
Checking email addresses during registration and invitations
Data categories
  • Email addresses
Processing location
Provider managed infrastructure, including US
Transfer safeguard
Processing location and applicable transfer guarantees under review
Contractual basis
Contractual basis under review

Resend (Resend Inc.)

Processor
Purpose
Sending transactional emails such as invitations and notifications
Data categories
  • Email addresses
  • Message content and delivery data
  • Account and User Identifications
Processing location
Provider managed infrastructure, including US
Transfer safeguard
Processing location and applicable transfer guarantees under review
Contractual basis
Contractual basis under review

AEW Energie AG

Public or legally competent recipient
Purpose
Submission and processing of grid connection applications
Data categories
  • Contact details
  • Address details
  • Project and lead data
  • Technical system and design data
Processing location
Aarau, Aargau, Switzerland
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Role distribution and contractual basis under review

K2 Systems GmbH (K2Base)

Customer-selected integration or recipient
Purpose
Design of PV systems and retrieval of associated documents
Data categories
  • Address details
  • Project and lead data
  • Technical system and design data
  • Documents
Processing location
Germany (EU)
Transfer safeguard
Adequate level of data protection in the EU
Contractual basis
Contractual basis under review

Federal Office of Topography (swisstopo / GeoAdmin)

Public or legally competent recipient
Purpose
Address, location and geodata queries from public geoservices
Data categories
  • Address details
  • Location and geodata
  • Project and lead data
Processing location
Switzerland (federal infrastructure)
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Use in accordance with the applicable conditions of the public body

Exoscale SA (Akenes SA)

Processor
Purpose
Encrypted external backup of database and storage contents
Data categories
  • Application and business data
  • Files and attachments
  • Account and User Identifications
Processing location
Zurich, Switzerland
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Contractual basis under review

Google LLC (Firebase Cloud Messaging)

Processor
Purpose
Mobile push notification delivery
Data categories
  • Device and push tokens
  • Contents of push notifications
  • Account and User Identifications
Processing location
Global infrastructure, including USA
Transfer safeguard
Standard contractual clauses and contractual safeguards
Contractual basis
Contractual basis under review

Bexio AG

Customer-selected integration or recipient
Purpose
Synchronization of contacts with the customer's Bexio account
Data categories
  • Contact details
  • Address details
  • Customer and account information
Processing location
Switzerland
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Contractual basis under review

DeepCloud AG (DeepSign)

Processor
Purpose
Simple electronic signature of offers in the customer portal
Data categories
  • Offer, price and acceptance data
  • Contact details
  • Address details
  • IP address, browser and device data
  • Signed documents and signature proofs
Processing location
Switzerland; exact location to be confirmed before productive use
Transfer safeguard
Productive use remains blocked until documented contractual and transfer law checks have been carried out
Contractual basis
To be completed and documented before production activation

Brunner Informatik AG (ElektroForm Solar)

Customer-selected integration or recipient
Purpose
Preparation and submission of electronic installation reports
Data categories
  • Contact details
  • Address details
  • Project and lead data
  • Technical system and design data
  • Documents
Processing location
Switzerland; exact location to be confirmed before productive use
Transfer safeguard
Processing in Switzerland; no additional foreign transfer guarantee required
Contractual basis
Contractual basis under review

Levasoft GmbH / Solarmarkt AG (Solar.Pro.Tool / Solarmarkt)

Customer-selected integration or recipient
Purpose
Import of PV project data and transmission of material orders
Data categories
  • Contact details
  • Address details
  • Project and lead data
  • Technical system and design data
  • Documents
Processing location
Switzerland and Germany; exact regions under review
Transfer safeguard
Processing in Switzerland or in a country with an adequate level of data protection
Contractual basis
Contractual basis under review

Google LLC (Google Workspace — Gmail, Calendar, People APIs)

Processor
Purpose
Email, calendar and contact features for connected Google accounts
Data categories
  • Email content and metadata
  • Email attachments
  • Contact details
  • Calendar events and participant data
  • OAuth tokens and connection identifiers
Processing location
Region of the customer's Google Workspace or Google Account
Transfer safeguard
Provider conditions and applicable guarantees for international transfers
Contractual basis
Contractual basis under review