Sub-processors
Last updated: 10 November 2026 · Version 2026-11-10
The providers that process personal data on behalf of Onesta (Romania Business Labs SRL): who they are, what they do and where. For the data of a firm's clients the firm is the controller, Onesta is the processor and those below are sub-processors, under the data processing agreement in the Terms. We publish changes to the list on this page.
1. Hosting
Railway Corporation: hosting of the application and the database, in Railway's EU West region (European Union).
2. Email
Resend: delivery of the emails Onesta sends — invitations, notifications and messages about the account.
3. Payments
Stripe: collecting the firm's subscription.
4. Usage analytics
PostHog Inc., EU cloud (data stored in Germany): on the site and in the app, only with your consent.
5. The AI team
MARQL LTD (marql, a product of the same team; based in the United Kingdom, data stored in the European Union): running the AI team's assistants, only for the firms that use it.
We name the AI model provider marql uses on request, at contact@onesta.app.
6. Phone notifications
Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging): delivery of notifications in the Onesta phone app, only if you turn them on.
7. Transfers and questions
If a provider processes data outside the European Economic Area, it does so only with appropriate safeguards: an adequacy decision or the standard contractual clauses approved by the European Commission.
Questions about this list: contact@onesta.app.