PostHog
Purpose: limited product analytics. Configuration: EU Cloud endpoint, cookieless client persistence disabled; no session recording/autocapture in the reviewed implementation. Data: product events, technical event properties and an internal account identifier for signed-in users.
Paddle
Purpose: checkout, subscription/payment administration and customer billing portal. Paddle receives billing and transaction information required to provide its services. Paddle may act as an independent controller for parts of payment, tax, fraud-prevention and statutory processing and as a processor where applicable under its contractual terms.
Hosting and infrastructure
PowderQuote necessarily uses hosting/infrastructure providers to run the web service and database. The production hosting arrangement must be verified against the live deployment before this list is treated as final. Add the legal entity, processing location and transfer mechanism once confirmed.
Changes
Material subprocessor changes will be published on this page. Where the Provider acts as a processor for a customer, the DPA governs subprocessor authorisation and obligations.