Encrypted connections
Your browsing on this website uses HTTPS/TLS to protect information during transmission.
Trust CenterSub-processors
Sub-processors
The real vendors that process data on DITAP's behalf to run the site and products. Aligned with the list published in our Privacy Policy.
| Provider | Category | Purpose | Data location | Safeguard |
|---|---|---|---|---|
| Vercel Inc. | Hosting & CDN | Hosts ditap.io and serves it through its global edge network. Runs the serverless functions behind contact, checkout and newsletter. | United States / global (edge network) | DPA + EU Standard Contractual Clauses (SCC) |
| Supabase Inc. | Database & authentication | Stores operational data for DITAP products (for example, the service status that powers /status) when the contracted service requires it. | European Union (Frankfurt) and Brazil (São Paulo), depending on the project | DPA + EU Standard Contractual Clauses (SCC) |
| Cloudflare Inc. | DNS & network security | Manages ditap.io's DNS, mitigates network attacks (DDoS) and optimizes edge content delivery. | United States / global PoP network | DPA + EU Standard Contractual Clauses (SCC) |
| Stripe, Inc. | Payment processing | Processes card payments for the ebook and other checkouts. DITAP never stores card numbers: payment data is tokenized inside Stripe's infrastructure. | United States, and for European accounts, Ireland (Stripe Payments Europe Ltd.) | DPA + PCI-DSS Level 1 certification |
| MercadoPago (Mercado Libre / Mercado Pago S.R.L.) | Payment processing | Local payment alternative for customers in Argentina and other Latin American countries where MercadoPago operates. | Argentina, with regional operations in the Latin American countries it serves | DPA + PCI-DSS certification |
| Resend | Transactional email | Sends the site's transactional emails: contact confirmations, ebook delivery and newsletter welcome messages. | United States | DPA + EU Standard Contractual Clauses (SCC) |
| Google Analytics 4 (Google LLC) | Traffic analytics | Measures aggregate browsing behavior to understand which pages perform. Only activates with explicit consent (Consent Mode); IP is anonymized. | United States and Google's global data centers | DPA + EU Standard Contractual Clauses (SCC) + IP anonymization |
| Sentry (Functional Software, Inc.) | Error monitoring | Captures runtime errors from the DITAP site and applications to detect and resolve incidents before they affect more users. | European Union (Germany) — Sentry's EU data residency | DPA — processing within the EEA |
| n8n (autoalojado por DITAP) | Workflow automation | Orchestrates the internal webhooks that process contact submissions, newsletter sign-ups and ebook purchase confirmations, routing them to the rest of the systems (email, CRM). | DITAP's own infrastructure (self-managed VPS) | Self-hosted instance under DITAP's direct control; not a third party with independent access to the data |
Vercel Inc.
Hosting & CDN
- Purpose
- Hosts ditap.io and serves it through its global edge network. Runs the serverless functions behind contact, checkout and newsletter.
- Data location
- United States / global (edge network)
- Safeguard
- DPA + EU Standard Contractual Clauses (SCC)
Supabase Inc.
Database & authentication
- Purpose
- Stores operational data for DITAP products (for example, the service status that powers /status) when the contracted service requires it.
- Data location
- European Union (Frankfurt) and Brazil (São Paulo), depending on the project
- Safeguard
- DPA + EU Standard Contractual Clauses (SCC)
Cloudflare Inc.
DNS & network security
- Purpose
- Manages ditap.io's DNS, mitigates network attacks (DDoS) and optimizes edge content delivery.
- Data location
- United States / global PoP network
- Safeguard
- DPA + EU Standard Contractual Clauses (SCC)
Stripe, Inc.
Payment processing
- Purpose
- Processes card payments for the ebook and other checkouts. DITAP never stores card numbers: payment data is tokenized inside Stripe's infrastructure.
- Data location
- United States, and for European accounts, Ireland (Stripe Payments Europe Ltd.)
- Safeguard
- DPA + PCI-DSS Level 1 certification
MercadoPago (Mercado Libre / Mercado Pago S.R.L.)
Payment processing
- Purpose
- Local payment alternative for customers in Argentina and other Latin American countries where MercadoPago operates.
- Data location
- Argentina, with regional operations in the Latin American countries it serves
- Safeguard
- DPA + PCI-DSS certification
Resend
Transactional email
- Purpose
- Sends the site's transactional emails: contact confirmations, ebook delivery and newsletter welcome messages.
- Data location
- United States
- Safeguard
- DPA + EU Standard Contractual Clauses (SCC)
Google Analytics 4 (Google LLC)
Traffic analytics
- Purpose
- Measures aggregate browsing behavior to understand which pages perform. Only activates with explicit consent (Consent Mode); IP is anonymized.
- Data location
- United States and Google's global data centers
- Safeguard
- DPA + EU Standard Contractual Clauses (SCC) + IP anonymization
Sentry (Functional Software, Inc.)
Error monitoring
- Purpose
- Captures runtime errors from the DITAP site and applications to detect and resolve incidents before they affect more users.
- Data location
- European Union (Germany) — Sentry's EU data residency
- Safeguard
- DPA — processing within the EEA
n8n (autoalojado por DITAP)
Workflow automation
- Purpose
- Orchestrates the internal webhooks that process contact submissions, newsletter sign-ups and ebook purchase confirmations, routing them to the rest of the systems (email, CRM).
- Data location
- DITAP's own infrastructure (self-managed VPS)
- Safeguard
- Self-hosted instance under DITAP's direct control; not a third party with independent access to the data
This list is updated whenever we add or remove a vendor. For questions about any specific vendor, write to hola@ditap.io.
Need the full list for your vendor audit process?
We'll send it in an exportable format, along with the relevant active DPAs.
Request at hola@ditap.io