Sub processors

Sub-Processors and Third-Party Service Providers

Table of contents

1.0 INFRASTRUCTURE SUB-PROCESSORS (DPA SCOPE)

2.0 CORPORATE SERVICE PROVIDERS (PRIVACY POLICY SCOPE)

3.0 CONTACT

Last updated: September 15, 2026‍

Remotive Labs AB ("Remotive Labs") uses the third-party service providers listed below to deliver and support the RL Solution. This page is maintained in accordance with our Privacy Policy and the Data Processing Addendum (DPA) forming part of our Terms of Use.
‍
The providers are organised into two groups. Infrastructure sub-processors process customer data (including Uploaded Content) as part of delivering the RL Solution — these are the sub-processors referred to in Section 4 of the DPA. Corporate service providers process personal data that Remotive Labs collects as a data controller (website visitors, business contacts) as described in our Privacy Policy.

1. INFRASTRUCTURE SUB-PROCESSORS (DPA SCOPE)

These providers process customer Uploaded Content and associated data on behalf of Remotive Labs, acting as sub-processors under the DPA. Changes to this list are notified to customers at least 30 days in advance, in accordance with DPA Section 4.

Provider	Entity & Location	Purpose	Data Processed	Transfer Mechanism
Google Cloud Platform (GCP)	Google LLC, United States	Cloud hosting infrastructure for RemotiveCloud — compute, storage, networking, and database services	Uploaded Content (including any personal data contained therein); account metadata; Service Data	EU–US Data Privacy Framework (adequacy decision); Standard Contractual Clauses (June 2021)

GCP region:

‍2. CORPORATE SERVICE PROVIDERS (PRIVACY POLICY SCOPE)

These providers process personal data that Remotive Labs collects as a data controller — primarily from website visitors and business contacts. They are the "External Third Parties" referenced in the Privacy Policy glossary.

Provider	Entity & Location	Purpose	Data Processed	Transfer Mechanism
HubSpot	HubSpot, Inc., United States	CRM, marketing automation, email communications, live chat, forms, and website analytics	Identity Data; Contact Data; Marketing and Communications Data; Technical Data (via tracking cookies)	EU–US Data Privacy Framework (DPF-certified)
Google Analytics	Google LLC, United States	Website usage analytics (page views, sessions, traffic sources)	Technical Data (IP addresses, browser/device info, pages visited, usage patterns — via _ga and _ga_# cookies)	EU–US Data Privacy Framework (adequacy decision)
Google reCAPTCHA	Google LLC, United States	Bot detection and abuse prevention on forms	Technical Data (IP address, browser characteristics, interaction patterns)	EU–US Data Privacy Framework (adequacy decision)
Cookiebot (Usercentrics)	Usercentrics A/S, Denmark (EEA)	Consent management — collecting, storing, and enforcing cookie consent preferences	Consent state; consent ID; domain; timestamp	EEA-based — no international transfer
Cloudflare	Cloudflare, Inc., United States	Content delivery network (CDN), DDoS protection, bot management, Turnstile challenge widget	Technical Data (IP addresses, request headers, TLS metadata)	EU–US Data Privacy Framework; Standard Contractual Clauses
LinkedIn	LinkedIn Ireland Unlimited Company, Ireland (EEA); LinkedIn Corporation, United States	Social sharing, professional networking integrations, and advertising attribution	Technical Data (cookie identifiers, page interactions)	EEA-based entity (LinkedIn Ireland); transfers to US under EU–US Data Privacy Framework

Providers Pending Confirmation
‍
The following providers were detected in the Cookiebot cookie scan (February 2026) but have not yet been confirmed as intentionally deployed. If confirmed, they should be added to the table above. If they are legacy or unintended scripts, they should be removed from the site. See Cookie Compliance Review, Action Item 8.

Provider	Entity & Location	Purpose	Data Processed	Transfer Mechanism
Mixpanel	Mixpanel, Inc., United States	Product analytics — user behaviour tracking, session recording, event analytics	Technical Data (device identifiers, usage patterns, session data — via cdn.mxpnl.com cookies)	To be confirmed (Mixpanel offers SCCs and DPF)
Reddit	Reddit, Inc., United States	Advertising attribution — conversion tracking pixel	Technical Data (cookie identifiers, page interactions — via _rdt_uuid, rp.gif cookies)	To be confirmed (Reddit offers DPF)

‍3. CONTACT‍
‍
For questions about our sub-processors or data processing arrangements, contact us at privacy@remotivelabs.com or at the postal address listed in our Privacy Policy.

Join the automotive rebels that #getstuffdone with RemotiveLabs!