1. Where data is stored
The Fature.al servers and database are located in the European Union, in the Netherlands (DigitalOcean, data centre in Amsterdam). Invoices, customers, products and all other data of your business are stored there and processed in compliance with the GDPR and Law no. 124/2024.
We do not sell your data and do not share it with third parties for their own purposes. We use the services below only to provide Fature.al, under the Data Processing Agreement.
2. Sub-processors
These services are used for every account:
| Service | Purpose | Location | Safeguard |
|---|---|---|---|
| DigitalOcean, LLC | Servers, database and backups | EU (Netherlands, Amsterdam) | Data processing agreement (DPA) |
| Cloudflare, Inc. | DNS, DDoS protection and filtering of malicious traffic | Global network; traffic passes through the point closest to the user. Cloudflare does not store invoice data | DPA and EU Standard Contractual Clauses |
| Mailgun Technologies, Inc. (Sinch) | Sending system emails: password reset, notifications, invoices you send by email | EU | DPA |
| Pusher Ltd. | Real-time notifications in the application (WebSocket) | EU | DPA |
| Functional Software, Inc. (Sentry) | Logging technical errors, so we can fix them quickly | EU | DPA. Personal data is not sent by default |
3. Services used only when you switch them on
| Service | Purpose | Location | Safeguard |
|---|---|---|---|
| Anthropic, PBC | Artificial intelligence features, e.g. grouping products with similar names in the sales report | USA | EU Standard Contractual Clauses. Anthropic does not use this data to train its models |
The artificial intelligence features are off until the business administrator switches them on and accepts their terms. We send only the data that feature needs. Anthropic keeps it only for a limited time, under its commercial terms, and then deletes it.
4. The tax authority
Invoices are transmitted to the General Directorate of Taxation for fiscalisation and e-Invoicing, through the systems of AKSHI (the National Agency for Information Society). This is not sub-processing: the law requires it and you request it when you issue the invoice.
5. Integrations you connect
You connect some services to Fature.al yourself. They are not our sub-processors: you choose them and the relationship with them is yours.
- Shopify, WooCommerce and Wolt: we read the orders from your shop to issue the invoices. We do not send them your customers' data.
- POK: when you choose to pay with POK, we send it the amount, the currency and a payment reference number. Card data is processed only by POK.
- MCP clients and API applications: they receive only the data you allow, after you connect them and confirm the sharing.
6. Changes to this list
Before we add or replace a sub-processor, we update this page and notify account administrators by email at least 30 days in advance. You may object under the Data Processing Agreement.