Eingesetzte Dritte

Anbieter und Auftragsverarbeiter

Aktuelle Liste der von UQBITZ eingesetzten Dritten, mit Zweck und Standort sowie der Ankündigungsfrist für Änderungen.

Dieses Dokument liegt derzeit nur auf Englisch vor. Eine deutsche Fassung wird nach der rechtlichen Prüfung veröffentlicht.

This English translation is provided for convenience. If it conflicts with the Portuguese version, the Portuguese version prevails.

This page lists the third parties UQBITZ uses to provide its services, with each one's purpose and where they operate. It is kept current and replaces the lists that used to live inside the Terms of Service and the Privacy Policy.

1. How this page relates to the contracts

This page is part of the Terms of Service and the Privacy Policy. Where those documents refer to suppliers and subprocessors, they refer to the list below.

Changes to this page are communicated to the CLIENT at least 30 (thirty) days before they take effect. A CLIENT who objects on reasoned grounds to the addition or replacement of a supplier may terminate the affected services, without penalty, within that period.

Every change is recorded in section 5, with its date.

2. Operational suppliers

Third parties serving the relationship between UQBITZ and the CLIENT. In this processing UQBITZ acts as controller, and the purposes are described in the Privacy Policy.

SupplierPurposeLocation
StripeCard payment processingUnited States
Banco InterPIX and bank slip payment processingBrazil
GoogleSending messages through the email API, authentication with a Google account and administration of Google Workspace licensesUnited States
Google Tag ManagerManaging the site's measurement and advertising tools, currently Google Analytics and Google Ads, enabled only upon consentUnited States
ViaCEP and BrasilAPIAddress lookup from the postal code entered during registrationBrazil
GeoapifyAddress lookup outside Brazil[TO BE CONFIRMED]
DiscordOperational communication and alerts of the support and infrastructure teamsUnited States
EICON Inteligência em Controles (GINFES/GISSONLINE)Issuing and processing tax documents for the municipality of São Bernardo do CampoBrazil
Enom (Tucows)Domain name registration and managementUnited States and Canada
Registro.brRegistration and management of `.br` domainsBrazil
GitHubHosting the platform's own codeUnited States

3. Subprocessors of hosted data

Third parties processing personal data the CLIENT hosts on the platform. In this processing the CLIENT defines purposes and means, and UQBITZ acts as processor, under the Data Processing Agreement.

SubprocessorPurposeLocation
HetznerComputing and storage infrastructure for the environmentsGermany
Amazon Web Services (SES)Delivery of the email marketing campaigns the CLIENT configures on their sites, including the contact listsUnited States
CloudflareDNS, edge, application protection and attack mitigationGlobal
BackblazeBackups outside the main datacenter, encrypted at the sourceUnited States
Object storage providerMigration uploads, site and database exports[TO BE DEFINED]
Let's Encrypt (ISRG)Issuing TLS certificates for the domainsUnited States
Enom (Tucows)Domain registration, including ownership dataUnited States and Canada
GitHubCode repositories and publishing integration indicated by the CLIENTUnited States
GoogleResale and administration of Google Workspace accounts, when contractedUnited States
AnthropicRunning the artificial intelligence features, when usedUnited States

4. Destinations configured by the CLIENT

The product can forward notifications and events to tools the CLIENT chooses, among them Slack, Discord, PagerDuty, Opsgenie and webhook addresses they define.

In those cases UQBITZ performs the delivery according to the CLIENT's configuration, and the CLIENT is responsible for the lawfulness of the sharing and for the relationship with the respective supplier. These destinations are not UQBITZ subprocessors, and adding one does not depend on the notice described in section 1.

5. Change history

DateChange
2026-09-04Page created, bringing together the lists that lived in the Terms of Service and the Privacy Policy, which disagreed with each other. Mercado Pago removed, gateway deactivated on 2026-09-04. Now listed by name: Banco Inter, Google Tag Manager with Google Analytics and Google Ads, ViaCEP, BrasilAPI, Geoapify, EICON Inteligência em Controles, Amazon Web Services and Anthropic. Google is no longer described as Google Cloud and is now described by its actual use.