Sub-processors

Hosts the application servers, the database and your files.

Data received:

All of your workspace data — users, assets, work orders, inventory, documents, HSE records. Compute and database in Gravelines; file storage replicated to Strasbourg, where backups are kept. ISO 27001, 27017 and 27018 certified.

Transfer outside the EEA:

None.

Merchant of Record: the legal seller of paid subscriptions, handling collection, tax and invoicing.

Data received:

Name, email address, billing address, invoice lines and subscription history. Card details are held by Lemon Squeezy — we never store any.

Transfer outside the EEA:

Yes — covered by the European Commission's Standard Contractual Clauses (implementing decision 2021/914).

Only for subscriptions paid by card. A free account, or one invoiced by bank transfer, never reaches this provider.

Main outbound mail server for transactional email.

Data received:

Email addresses, names, and the content of the messages the service generates.

Transfer outside the EEA:

None.

Self-hosted on our own infrastructure in France — not a separate third party.

Critical email (address verification, password reset, invitations) and backup when the main channel is unavailable.

Data received:

Email addresses, names, and the content of transactional messages. ISO 27001 certified.

Transfer outside the EEA:

None.

Gateway to the language models behind the AI features: assistant, failure analysis, photo diagnosis, voice transcription.

Data received:

Only what is submitted to the feature — the question asked, the equipment description or photo, the voice recording, and the context needed to answer. Never a bulk extract of your database.

Transfer outside the EEA:

Yes — covered by the European Commission's Standard Contractual Clauses (implementing decision 2021/914).

You can switch the AI features off for your whole company. Switched off, nothing at all reaches this provider.

Delivers push notifications to the mobile app.

Data received:

Device token, plus the title and body of the notification.

Transfer outside the EEA:

Yes — covered by the Standard Contractual Clauses and the EU-US Data Privacy Framework.

Only for people who installed the mobile app.

"Continue with Google / Apple" sign-in, at the user's choice.

Data received:

Account identifier, email address, name.

Transfer outside the EEA:

Yes — covered by the Standard Contractual Clauses and the EU-US Data Privacy Framework.

Strictly optional. Signing in with an email and a password involves neither of them.

Technical error tracking, so we can find and fix faults.

Data received:

Error traces and minimal context (company identifier, role). Passwords, session cookies and tokens are stripped before transmission. Kept 30 days.

Transfer outside the EEA:

None.

Self-hosted on our own infrastructure in France — not a separate third party.

Product usage measurement. Being replaced by PostHog.

Data received:

Usage events, company identifier, pseudonymous user identifier. Cookieless. No business data.

Transfer outside the EEA:

None.

Self-hosted on our own infrastructure in France — not a separate third party.

Enterprise single sign-on (SAML 2.0, OIDC, SCIM 2.0) for customers connecting their own identity provider.

Data received:

Identity-provider configuration, authentication assertions, directory attributes synchronised over SCIM.

Transfer outside the EEA:

None.

Self-hosted on our own infrastructure in France — not a separate third party.

Enterprise plan only, and only for customers who connected an identity provider.

Product usage measurement: which features are used and where people get stuck. Also used to compare two versions of a screen (A/B testing) and to offer short in-app questionnaires.

Data received:

Action names (never their content), company identifier, pseudonymous user identifier, page visited, approximate location (country, city, postal code). IP addresses are not retained. Never your maintenance content: no work order text, no documents, no photos, no AI questions or answers.

Transfer outside the EEA:

None.

Subject to visitor consent. If analytics cookies are declined, nothing is loaded and nothing is sent. Session recording covers a closed list of public pages on our website only — never a screen of the application.