PDigger
eprojac Ltd uses the following subprocessors for PDigger. This is the authorised list under the DPA. For each we state the contracting entity, its role, where it processes data, and the mechanism we rely on for transfers out of the UK and EEA.
Infrastructure
Amazon Web Services, Inc.
Entity: Amazon Web Services, Inc.
Role: website hosting (CloudFront, S3), Google sign-in hosting (Cognito), proxy compute (Lambda), usage ledger, profiles and configuration (DynamoDB, including point-in-time backups), short-lived large-request uploads (S3), operational logs (CloudWatch).
Location: United States (us-east-1); CloudFront edge locations worldwide.
Transfer mechanism: EU-US Data Privacy Framework including the UK Extension; EU Standard Contractual Clauses and UK Addendum in the AWS Data Processing Addendum.
Identity
Google LLC
Entity: Google LLC.
Role: identity provider for optional Google sign-in (email, display name, subject identifier).
Location: global, according to Google’s services.
Transfer mechanism: EU-US Data Privacy Framework including the UK Extension; Standard Contractual Clauses and UK Addendum in Google’s data processing terms.
Website analytics
Google Ireland Limited (with Google LLC)
Entity: Google Ireland Limited — the Google Analytics contracting entity for UK and EEA customers — with Google LLC as its processor.
Role: Google Analytics 4 for local.pdigger.com (page visits and Download button clicks). Nothing is loaded and no cookie is set until the visitor clicks Accept; see the Cookie Notice. Google Signals and advertising features are off.
Location: EU and United States.
Transfer mechanism: EU-US Data Privacy Framework including the UK Extension for Google LLC; Standard Contractual Clauses and UK Addendum in the Google Ads Data Processing Terms.
Inference
OpenAI, L.L.C.
Entity: OpenAI, L.L.C.
Role: VLM inference (gpt-5.6-luna) for requested assistance. The PDigger proxy forces store: false; OpenAI may retain inputs and outputs for up to 30 days for abuse monitoring.
Location: United States.
Transfer mechanism: EU Standard Contractual Clauses and UK Addendum in the OpenAI Data Processing Addendum; EU-US Data Privacy Framework where OpenAI is certified.
Notice of changes
We give at least 14 days’ notice on this page before adding or replacing a subprocessor. We do not send email notices; check this page. The DPA explains how to object.