Last updated: September 2026
PassIssuer uses a limited number of third-party providers to operate, secure and deliver the service.
This page describes providers that may process customer or end-user information in connection with the PassIssuer service. Whether a particular provider processes a customer’s data depends on the PassIssuer functionality used by that customer.
PassIssuer is operated by Ongoing Things UG (haftungsbeschränkt), Berlin, Germany. Company details are on our Impressum, and how we handle personal data is described in our Privacy Policy.
| Provider | Purpose | Data / processing | Primary processing or storage location |
|---|---|---|---|
| Hetzner Online GmbH | Application, API and database hosting | PassIssuer application data and customer/member data | European Union |
| Backblaze, Inc. / Backblaze B2 | Encrypted backup storage | Backups are encrypted by PassIssuer prior to transfer, so Backblaze stores them in encrypted form. | European Union |
| Postmark | Transactional email delivery when enabled or requested by a customer | Recipient email address and email content required to deliver the message. Member-facing email is optional — it is only used where a customer enables or requests it. | United States |
| Cloudflare, Inc. | Content delivery, network delivery, performance and security | Network/request metadata such as IP address and HTTP connection information. PassIssuer does not intentionally store its customer/member database with Cloudflare. | Global infrastructure |
| BunnyWay d.o.o. / bunny.net | Content delivery / infrastructure services | Limited network and delivery information where the service is used | EU-based provider / distributed infrastructure |
| Plausible Analytics | Privacy-friendly aggregate website/application analytics | Aggregate usage analytics; no advertising profiles or cross-site tracking | European Union |
| Bugsink | Application error monitoring and reliability | Technical diagnostic information about an error, such as browser, device and request context and the actions that led to it. Reports relate to users of the PassIssuer application at customer organisations; member and end-user pass records are not processed for this purpose. | European Union |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Subscription billing and payment processing | Billing contact, account and payment details of the PassIssuer customer organisation. Member and end-user pass data is not sent to Stripe, and PassIssuer does not store card details. | Ireland and United States |
| Google Workspace / Google LLC | Business and support communications | Information included in support or business correspondence. Ordinary member records are not automatically sent to Google Workspace. | As provided under Google Workspace infrastructure and contractual terms |
| Google Wallet / Google LLC | Creation and management of Google Wallet passes | The pass information selected or configured by the customer for the Google Wallet pass. This applies only where a Google Wallet pass is issued. | Google infrastructure |
| Apple Inc. / Apple Push Notification service (APNs) | Delivery of pass-update notifications to Apple devices | Apple Wallet device/push registration token and a minimal update notification indicating that updated pass information is available. The notification sent through APNs does not contain the updated member/pass fields. | Apple infrastructure |
The providers involved in processing may vary depending on the functionality used by a customer. PassIssuer reviews this list as its infrastructure changes and will update this page when relevant service providers change.
Questions about data processing or subprocessors can be sent to [email protected].