Sub-processors

The categories of service providers that process personal data for Node Lodge, what they process and in which countries, and how to follow changes.

1. How to read this page

1.1. VDTI, the operator of Node Lodge, uses the service providers below to run the Service. Each processes personal data only on our instructions, under a written contract that protects it. This page is Annex 3 of our Data Processing Addendum.

1.2. Providers are listed by category and country. Customers who need more detail for their own compliance can write to privacy@nodelodge.com.

2. Platform

Category	What it processes	Countries
Hosting of the platform and database	Account, organization, session, credit, payment records, activity log, support requests, host data, server logs	Canada
Session relay	Connections between you and Community Sessions, and their logs	Canada
Database backups	Encrypted copies of the database	United States or Canada (eastern North America)
Support attachments and website media	Files you attach to Support requests; website images and video	United States or Canada (eastern North America), delivered through a global network
DNS and email routing	Messages you send to our addresses, in transit	United States, global network
Business mailbox	Messages you send to support@, privacy@, security@ and abuse@, and our replies	Canada or United States
Transactional email and product updates	Email address and email content; subscription status	European Union (France)
Payments, taxes and payouts	Billing name and address, tax number, card data, payment history; Host identity and bank details	United States, Canada and other countries where the processor operates. Also an independent controller for fraud prevention and its legal obligations
Error monitoring	Error reports without cookies, headers or request bodies	European Union (Germany)

3. Compute

Category	What it processes	Countries
Secure infrastructure partners	Customer Content on Secure Machines; your SSH public key and allowed IP range; Machine settings	The country of the Machine, shown in the console before launch
Community Hosts	Customer Content on Community Machines while the Session runs; metadata-only network records	The country declared for the Machine, shown in the console before launch

4. Changes

4.1. We update this page at least 30 days before a new category of sub-processor, or a sub-processor in a new country, starts processing personal data, as provided in the Data Processing Addendum.

4.2. Follow changes:

subscribe to the feed of changes in any RSS reader;
or write to privacy@nodelodge.com with the subject “Sub-processor updates” to receive each change by email.

The history of changes follows.

Change history

Date	Change
November 7, 2026	First publication of the list of sub-processors.