tuix is made in Europe. Every company that stores or processes personal data for us is a European company, and the data stays in the European Economic Area.
Subprocessors for customer data
These companies process the data in your workspace for us, under our data processing agreement with you.
| Service | Company | Where the data is | What they do | What data |
|---|---|---|---|---|
| UpCloud | UpCloud Ltd, Finland | Frankfurt, Germany | Our application server, managed PostgreSQL database and private file storage | Everything in your workspace: reports, comments, screenshots and attachments, identities from your app, console and network entries, settings, and account data |
| Lettermint | Lettermint B.V., Netherlands | Amsterdam, the Netherlands; backups in Germany | Sends our emails | Recipients' names and email addresses, and email content: sign-in links, invitations, report titles and quoted replies |
| UpCloud | UpCloud Ltd, Finland | Frankfurt, Germany | Hosts the server where we run OpenObserve, the software that keeps our traces and logs | Request and background job traces and application logs, with secrets and visitors' IP addresses removed; kept for 30 days |
We run OpenObserve ourselves. The company behind it receives no data.
Providers for our own business
These companies process personal data for us as the controller (see our privacy policy): billing data, and the emails you send us. They do not process the data in your reports.
| Service | Company | What they do | What data |
|---|---|---|---|
| Mollie | Mollie B.V., Netherlands | Takes payments | Company name and billing contact, payment method details, payments |
| Fakturownia | Fakturownia sp. z o.o., Poland | Issues our invoices and sends them to KSeF, the Polish National e-Invoicing System | Company name, address and tax number, invoice email address, invoice lines |
| mailbox.org | Heinlein Hosting GmbH, Germany | Our support and privacy inboxes | Emails you send us, and the names and addresses in them |
Not subprocessors
- Your integrations. If you connect a Slack channel, an AI app through our MCP server, or (when it launches) a Shopify store, you choose to send data to that service. It is your integration and your provider, not our subprocessor.
- GitHub builds our code. It holds no customer data.
Jurisdiction and government access
The EU Data Act (art. 28) asks us to say which law our infrastructure is subject to and how we protect your data from access by governments outside the EU.
- Jurisdiction. We are a Polish company. The servers, database and file storage that hold your workspace are run by UpCloud Ltd, a Finnish company, in Frankfurt, Germany. All of it is subject to EU law and to the law of Poland, Finland and Germany. No company in the list above is, as far as we know, subject to the law of a country outside the EEA.
- Our measures. Data stays in the EEA (section 9 of the data processing agreement). Data is encrypted in transit, workspaces are kept strictly apart, and only a few people at tuix can reach production systems, every one of their changes logged. If a court or authority outside the EU asks for your data, we follow section 9 of the data processing agreement: we hand over nothing unless EU law allows it, and we tell you first wherever we may.
Changes
Before we add or replace a subprocessor, we update this page and email the owners of every workspace at least 30 days ahead. You can object as section 8 of the data processing agreement describes.
| Date | Change |
|---|---|
| 2026-10-15 | First published |