Subprocessors
The third parties that process data on Pinger's behalf, and what each one touches.
Last updated 14 September 2026
Pinger uses a small number of third parties to run the service. Each is listed below with what it actually processes. This list is derived from the systems Pinger genuinely calls, not from a generic template, and it is updated when that changes.
Infrastructure
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Hetzner Online GmbH | Application servers and the PostgreSQL databaseAll account data and check history lives here. | Account records, monitored domains, check results, incidents | Germany (EU) |
| Cloudflare, Inc. | DNS, TLS, CDN and hosting for the marketing site and public toolsPinger's application hostnames are unproxied, so Cloudflare does not see logged-in application traffic. | Request metadata and IP addresses for pinger.ai | Global edge (US company) |
Communications
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Postmark | Transactional email: incident alerts, change notifications, account email | Recipient email address, message content | United States |
Slack and webhook notifications are sent only to endpoints you configure yourself. Pinger delivers to the address you provide; whoever operates that endpoint is your subprocessor rather than ours.
Optional, and only if you enable them
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Google LLC | Google Analytics Data and Admin APIsUsed only after you connect a Google account. Disconnecting revokes it. | OAuth tokens, the GA4 property you select, and the metrics returned | United States |
| Google Safe Browsing | Checking whether a monitored domain is flagged as unsafeOnly the domain is sent. No visitor data is involved. | The domain being checked | United States |
Public tools
The free tools at pinger.ai/tools need no account. Two of them involve a third party:
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| ipwho.is | IP geolocation for the What Is My IP tool | The IP address being looked up | United States |
| OpenStreetMap Foundation | The map shown on the What Is My IP toolYour browser loads this directly, so OpenStreetMap sees your IP address and the map area. Nothing else on the page is shared. | IP address, map bounding box | United Kingdom |
Identity
Sign-in runs through a Keycloak instance operated by Ginzamarkets at
auth.demandsphere.com. That is our own infrastructure rather than
a third party, and it is shared with other DemandSphere products so that one
account works across them.
Changes to this list
We will update this page before a new subprocessor begins processing customer data. If you would like advance notice by email, write to [email protected].