EZQR Sub-processors

The List

EZQR stores customer data on a DigitalOcean server in Toronto, Ontario, keeps off-site backups of that server with Backblaze in Toronto, and uses three other vendors for payments, email delivery, and traffic in transit. This is the complete list; if a vendor is not here, EZQR does not send it customer data.

Sub-processor	Purpose	Data involved	Location
DigitalOcean US company	Cloud hosting for the application, database, uploaded files, and backups	Everything EZQR stores: account details, QR codes and destinations, scan analytics, uploads, login records	Toronto, Ontario, Canada (TOR1 region)
Backblaze US company	Off-site object storage for full backups of the database and uploaded files	Backup copies of everything on the Toronto server: account details, QR codes and destinations, scan analytics, uploads, login records. Encrypted on the Toronto server before upload (restic); Backblaze holds only the encrypted archives and never the key	Toronto, Ontario, Canada (CA East region)
Cloudflare US company	DNS, TLS, content delivery, and protection against abusive traffic	Web requests in transit, including IP addresses; nothing is stored beyond short-lived caches and logs	Global network
Stripe US company	Checkout, subscription billing, invoices, and the billing portal	Name, email, billing address, and card details - card numbers never reach EZQR's server	United States
Brevo French company	Transactional email delivery: login codes, receipts, account notices	Email address and the contents of each message	European Union

What Stays on the Toronto Server

Your account, every dynamic QR code and the link it opens, per-scan analytics, any PDF, menu, or logo you upload, the login database, and database backups all live on the one DigitalOcean server in Toronto. A full backup of that server - the database and every uploaded file - is encrypted with restic before it leaves the server and written to Backblaze's Canada East region, also in Toronto, so a failure of the one server does not mean a loss of your codes or files. Backblaze stores the encrypted archives and never has the key. The approximate scan location shown in analytics is worked out from an IP-to-location database on that same server; scanner IP addresses are not sent to a third party to be geolocated. A full breakdown is on the data residency page.

Services That Are Not Sub-processors

Two services touch EZQR without handling customer data, listed here so the table above is not read as incomplete:

UptimeRobot polls a public scan endpoint to produce the uptime history at uptime.ezqr.ca. It sees the same thing any visitor sees and no customer data.
IP2Location supplies the offline database used for approximate scan location. The database is downloaded to the Toronto server; no scan data is sent to IP2Location.

How This List Is Maintained

EZQR is run by one person, who also writes the code that talks to each of these vendors, so the list is maintained from the source rather than from a compliance questionnaire. When a vendor is added or removed, this page and the privacy policy change together and the date at the top moves. If something here looks out of date, email [email protected].

Sub-processor FAQ

What is a sub-processor?

A sub-processor is a third-party company that handles some of your data on EZQR's behalf - the hosting provider, the payment processor, the email delivery service. Vendor reviews and privacy assessments ask for the list so they can see who could touch the data, for what purpose, and in which country. EZQR's full list is on this page.

Where is EZQR's customer data stored?

On a DigitalOcean server in Toronto, Ontario, Canada. That server holds the application, the database, uploaded files, and database backups. A full backup of that server - database and uploaded files - is encrypted and kept off-site with Backblaze, in its Canada East region, which is also in Toronto; the encryption key stays with EZQR. The other sub-processors handle specific slices - payments, email delivery, traffic in transit - and are listed on this page with the data each one receives.

Which of EZQR's sub-processors are outside Canada?

Stripe (payments), Brevo (email delivery), and Cloudflare (traffic in transit) are all outside Canada. DigitalOcean and Backblaze are both US companies, but the regions EZQR uses are in Toronto, so the stored data and its backups stay in Canada.

How do I get this list for a vendor or privacy review?

Print or save this page - it is the current list, with the date of the last change at the top. If your review needs it as a signed document or needs a statement about server location that you cannot verify from outside, email [email protected] and ask. The person who answers is the same person who runs the servers.

How will I know if the sub-processor list changes?

The "last updated" date on this page changes whenever a vendor is added or removed. Paying subscribers who need advance notice of changes for compliance reasons can ask for it at [email protected].