Subprocessors
ZentraLink is self-hosted. Apart from your hosting provider, every external service is opt-in - you only engage subprocessors that you have configured. The lists below reflect the components in the codebase.
Always engaged
Your hosting provider
Where the Ubuntu host runs (e.g. Hetzner, IONOS, on-prem).
Purpose: Run the ZentraLink application and PostgreSQL.
Location: Operator choice - default install guides target Germany.
Let's Encrypt (optional)
TLS certificate authority used by the install script's certbot integration.
Purpose: Issue certificates for the marketing and dashboard domains.
Location: Global anycast (USA-based root CA).
IANA RDAP bootstrap
https://data.iana.org/rdap/dns.json - read-only lookup table.
Purpose: Find the right RDAP server for each TLD.
Location: Global anycast.
Engaged on demand
DNS provider APIs
Cloudflare, Hetzner DNS, DigitalOcean, AWS Route53 or PowerDNS - only the providers you connect.
Purpose: Read and write the zones the customer has explicitly linked to ZentraLink.
Location: Per provider (EU / global).
SMTP provider
Whichever transactional mail provider you point ZentraLink at (e.g. Mailgun, Postmark, your own postfix).
Purpose: Deliver notification emails and reports.
Location: Per provider; configurable per workspace.
Stripe (optional)
Billing provider, only when Stripe keys are configured.
Purpose: Process subscription payments.
Location: Ireland / US, depending on Stripe account.
Last updated: deployment of this codebase. We do not engage any analytics or behavioural tracking provider on the marketing site or the dashboard.