Sub-processors

Version 2026-09-10 · effective 2026-09-10

These are the third parties that process data in order for Titan Community to work. This list forms part of our Data Processing Agreement.

Entries marked VERIFY or TO BE CONFIRMED are not yet complete. The hosting provider must be identified and each vendor’s data processing agreement and transfer mechanism confirmed and recorded before this service processes real customer data. See SECURITY_COMPLIANCE_AUDIT.md §12.

Current sub-processors

Provider	Purpose	Data	Location	Transfer basis
DiscordDiscord Netherlands BV / Discord Inc.	Core integration. Authentication, the bot that creates ticket channels, posting messages, and reading/granting roles.	Discord user and server identifiers; messages our bot posts into your channels; role changes made by your workflow actions.	EU / United States	VERIFY — confirm Data Privacy Framework certification or Standard Contractual Clauses
StripeStripe Payments Europe, Ltd. (Ireland)	Subscription billing, checkout, invoices and the customer billing portal.	Organization name and identifier; the organization owner’s email address and Discord user ID (as customer metadata); payment and card data, which is collected by Stripe and never reaches our servers.	Ireland, with onward transfer to the United States	VERIFY — confirm Stripe DPA and its transfer mechanism are on file
Hosting providerTO BE CONFIRMED	Runs the application servers and the PostgreSQL database.	All service data, including everything processed on your behalf.	TO BE CONFIRMED — target is the EU	VERIFY — identify the provider, sign a DPA, and record the hosting region

What we deliberately do not use

Titan Community loads no third-party scripts in the browser. There is no analytics SDK, no tag manager, no advertising pixel, no content delivery network and no externally hosted fonts. Product analytics is recorded on our own servers.

The only external host your browser contacts is Discord’s content delivery network, to display avatars.

Webhooks you configure

If you configure an outbound webhook, ticket and submission events are sent to the URL you supply. That destination is your choice and your responsibility as controller — it is not a sub-processor of ours.

Changes

We will give reasonable notice by email before adding or replacing a sub-processor, so you can object on data protection grounds. Questions: [email protected]. See also our Data Processing Agreement.