Trust Center
Registration, partner status, data handling and the sub-processor list ITSailor runs on, gathered in one place. Every line here already lives on the footer, /about, or the Privacy Policy; this page links each claim back to its source.
Identity and registration
ITSailor is a brand of Michal Jatczak, sole trader registered in Malta · VAT MT32760411 · DUNS 507601021.
Check MT32760411 on the EU VIES registerPartner status
Michal Jatczak T/A ITSailor holds Microsoft Authorized Partner status, Partner Location Account 7113951, Malta partner location.
Verify on the Microsoft partner directoryCommercial route: the Pax8 marketplace, a CSP Indirect Reseller path for Microsoft 365, Azure, backup, and security licensing.
Data protection
Production infrastructure runs on Hetzner in Falkenstein, Germany, inside the EU. Where a sub-processor operates outside the EEA, ITSailor relies first on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) for sub-processors self-certified under it, and on the European Commission's Standard Contractual Clauses as a standing fallback.
Read the full Privacy PolicyWhen you connect a Microsoft 365 or Google Workspace tenant to one of the diagnostic tools, every permission requested is read-only. The exact scopes, why each one is requested, what is stored, and how to remove access are listed on one page, generated from the code that makes the request so it stays in sync.
See what each connector requests and whySub-processors
The current sub-processor list, condensed from the Privacy Policy. The policy is the authoritative source and is updated first when this list changes.
| Processor | Purpose | Jurisdiction |
|---|---|---|
| Stripe Payments Europe Ltd. | Payment processing and subscription billing | Ireland (EU) |
| Resend, Inc. | Transactional email delivery | USA (EU-US DPF, SCCs fallback) |
| Upstash, Inc. | Managed storage for newsletter and rate-limit state | USA (DPA and SCCs) |
| Hetzner Online GmbH | Production server hosting and backups | Germany (EU) |
| Cloudflare, Inc. | DNS, CDN, and Zero Trust Tunnel | USA (EU-US DPF, SCCs; EU edge nodes) |
| Vercel, Inc. | Frontend hosting and edge logs | USA (EU-US DPF, SCCs; EU edge preferred) |
| Plausible Insights OÜ | Cookie-free website and conversion analytics | EU |
| GitHub, Inc. | Private repository hosting and tool authentication | USA (EU-US DPF under the Microsoft umbrella, SCCs) |
| Anthropic (Claude API) | SaaS Auditor briefs from aggregate figures, contract-document extraction, internal Ops Log drafting | Outside the EEA (SCCs; no framework claimed) |
| OpenAI (API) | Free-tool diagnostic report and the weekly Platform Health Briefing | Outside the EEA (SCCs; no framework claimed) |
| Cal.com | Scheduling for discovery calls, demos and paid workshop sessions | Outside the EEA (SCCs; no framework claimed) |
| DocRaptor | Rendering purchased eBook PDFs, which carry the buyer email in the licence line | Outside the EEA (SCCs; no framework claimed) |
| Google LLC (reCAPTCHA) | Abuse and fraud risk analysis on public contact and scan-request forms | USA (Google's applicable transfer safeguards) |
| Microsoft Ireland Operations Limited | Microsoft 365 services where you purchase through us via Pax8 | Ireland (EU) |
| Pax8 Inc. | Microsoft 365 licensing marketplace | EU operations (Netherlands) |
Data residency
Most personal data is stored and processed inside the EU/EEA: Malta, Germany, Ireland, and the Netherlands. Production servers, backend systems, and SaaS application data sit on Hetzner in Falkenstein, Germany.
Security contact
ITSailor does not yet run a dedicated security mailbox. Report a vulnerability or ask a security question at legal@itsailor.io. Data subject rights requests (access, rectification, erasure, portability) go to dsr@itsailor.io.
Documents
Data Processing Agreement (DPA): available on request during scoping.
Register of information
DORA Articles 28 to 30 require you to keep a register of information on every ICT third-party arrangement, to assess concentration risk, and to hold an exit strategy. Everything you need from us for that register is below, in one block, written to survive being copied into your own document.
Legal entity Michal Jatczak, sole trader registered in Malta Trading name ITSailor VAT identification MT32760411 D-U-N-S 507601021 Function supported ICT consultancy, Microsoft 365 and Azure architecture, security and cost tooling Position in the chain Direct provider. Microsoft CSP Indirect Reseller via the Pax8 marketplace Microsoft Partner Location Account 7113951 Data location EU/EEA. Production on Hetzner, Falkenstein, Germany Sub-processors Listed in full at itsailor.io/trust#sub-processors Data Processing Agreement Not signed by default. Available on request during scoping Exit strategy Exit Kit delivered within 24 hours of SOW engagement close. No request required Exit clause itsailor.io/legal/terms#exit-kit Deliverable ownership Perpetual royalty-free licence, transferable without approval
- The Exit Kit is delivered within 24 hours of engagement close on a SOW engagement.
- It is a term in the contract, not a time anyone has recorded, and it is not something you have to ask for. The pack is the architecture documents, configuration baselines, IaC modules, runbooks and the credentials a competent successor needs to run the estate without us. The 24-hour window covers consulting and implementation engagements under a SOW; the €499 workshop pack runs to a separate 5-business-day deadline, refunded in full if missed.
- Terms, section 05
- Every deliverable is licensed to you perpetually and transferable to a successor supplier without asking us.
- A perpetual, irrevocable, royalty-free licence to the architecture documents, Terraform modules, baselines and runbooks produced for you. No approval to ask for and no clause to negotiate on the way out. Ownership stays with us, the licence runs subject to payment in full, and third-party and open-source components inside a deliverable keep their own licences, all of which section 04 names. Licences bought through us are a different thing again and stay with the vendor, which section 3.4 says in full.
- Terms, section 04, licence and ownership
Neither register above takes a prefilled number: both are search forms, so the identifiers are rendered here for you to paste. If a field you need is missing, ask and it will be added to this block rather than answered once by email.