Centrum zaufania Zaktualizowano 3 listopada 2026

Bezpieczeństwo OKStatus, bez szarych stref.

Gdzie są Twoje dane, kto ma do nich dostęp, co jest wdrożone, a co jeszcze nie. Odpowiedzi, których udzielamy w przeglądach bezpieczeństwa, w wolnym dostępie.

Wydawca: ClearCloud SAS · Dijon, Francja · SIREN 539 932 731

Podmioty przetwarzające

Podmioty przetwarzające

Zaktualizowano 22 października 2026. Lista referencyjna DPA (załącznik III) i polityki prywatności (art. 4). Każde wypowiedzenie jest publikowane w kanale RSS.

FrancjaPlatforma, baza danych i kopie zapasowe: Scaleway w Paryżu, OVHcloud w Gravelines.
30 dniwypowiedzenia przed każdym dodaniem lub zastąpieniem, z prawem sprzeciwu (DPA, art. 2.4).
3 z 8uczestniczą tylko wtedy, gdy włączysz daną funkcję: logowanie społecznościowe, push lub SMS.

UE Decyzja stwierdzająca odpowiedni poziom ochrony Poza UE, standardowe klauzule umowne

OVHcloud Object storage (database backups, PDF reports, logos), hosting of the monitoring probes, and hosting of OKStatus's own status page (status.okstatus.eu) and its probes, outside the monitored platform FRUK
1 kwi 2026

Podmiot

OVH SAS — 2 rue Kellermann, 59100 Roubaix, France

www.ovhcloud.com ↗

Przetwarzane dane

Database backups (all service data), reports and logos; for the probes, check requests to your targets, with the monitor's credentials if it has any

Lokalizacja i przekazanie

France — object storage and OKStatus's status page in Gravelines (GRA). United Kingdom — public probe of the London region, OVHcloud site in London (Erith)

United Kingdom: European Commission adequacy decision

Scaleway Hosting of the platform (applications, database, identities) since 26 September 2026, and of the Paris region probe since 10 October 2026; transactional email delivery (alerts, notifications, reports, address verification) and the associated message queue FR
1 kwi 2026

Podmiot

Scaleway SAS — 8 rue de la Ville l'Évêque, 75008 Paris, France

www.scaleway.com ↗

Przetwarzane dane

All service data (accounts, monitors, results, incidents, status pages, logs); recipient email addresses and notification content

Lokalizacja i przekazanie

France (Paris, PAR2 datacentre)

Stripe Subscription payment and invoicingTylko plany płatne. IEUS
1 kwi 2026

Podmiot

Stripe Payments Europe Ltd — 1 Grand Canal Street Lower, Dublin 2, Irlande

stripe.com/privacy ↗

Przetwarzane dane

Billing identity, address, payment method (never stored by OKStatus), invoice history

Lokalizacja i przekazanie

Ireland (EU); Stripe, Inc. group (United States) for payment processing

Standard contractual clauses (module 2) and Stripe's DPA

Google · GitHub · GitLab Według wyboru Social sign-in (OAuth), only when you choose that sign-in method US
1 kwi 2026

Podmiot

Google LLC · GitHub, Inc. · GitLab, Inc.

Przetwarzane dane

Email address, display name

Lokalizacja i przekazanie

United States

Each provider's own transfer framework (EU-US Data Privacy Framework / standard contractual clauses)

Cloudflare DNS and proxy for OKStatus's own status page (status.okstatus.eu) only; the rest of the service does not go through itReszta usługi przez niego nie przechodzi. WW
28 wrz 2026

Podmiot

Cloudflare, Inc. — 101 Townsend Street, San Francisco, CA 94107, États-Unis

www.cloudflare.com/cloudflare-customer-dpa/ ↗

Przetwarzane dane

IP address and HTTP headers of status.okstatus.eu visitors

Lokalizacja i przekazanie

Global network, point of presence closest to the visitor

EU-US Data Privacy Framework and standard contractual clauses (Cloudflare's DPA)

Browser push services Według wyboru Delivering push notifications to the device, only if you enable the push channel; the service used depends on your browser or the appTreść szyfrowana end-to-end. US
28 wrz 2026

Podmiot

Google LLC (Chrome, Android) · Mozilla Corporation (Firefox) · Apple Inc. (Safari)

Przetwarzane dane

Device subscription identifier, encrypted notification content (monitor name, status)

Lokalizacja i przekazanie

United States

Each provider's own transfer framework (EU-US Data Privacy Framework / standard contractual clauses); content end-to-end encrypted (Web Push, RFC 8291)

UpCloud Hosting of the monitoring probes for the Frankfurt, Madrid, Amsterdam, Warsaw, Stockholm, Copenhagen, New York, San José, Singapore and Sydney regions (one machine per region, on site)Regiony spoza UE tylko dla monitorów, które je wybiorą. DEESNLPLSEDKUSSGAU
10 paź 2026

Podmiot

UpCloud Oy — Aleksanterinkatu 15 B, 00100 Helsinki, Finlande

upcloud.com ↗

Przetwarzane dane

Check requests to your targets, with the monitor's credentials if it has any, and their results (no account data)

Lokalizacja i przekazanie

European Union — Germany (Frankfurt), Spain (Madrid), Netherlands (Amsterdam), Poland (Warsaw), Sweden (Stockholm), Denmark (Copenhagen); outside the European Union — United States (New York, San José), Singapore, Australia (Sydney), only for monitors that pick these regions

United States, Singapore, Australia: European Commission standard contractual clauses (module 3)

OVHcloud SMS Według wyboru Sending SMS alerts and number verification codes, only if you create an SMS channel FR
14 paź 2026

Podmiot

OVH SAS — 2 rue Kellermann, 59100 Roubaix, France

www.ovhcloud.com/fr/sms/ ↗

Przetwarzane dane

Recipient's mobile number, SMS text (monitor name and address, status, region) or verification code

Lokalizacja i przekazanie

France; the SMS is then delivered by the recipient's mobile operator (European Union, European Economic Area, United Kingdom or Switzerland)

United Kingdom and Switzerland: European Commission adequacy decisions

To nie są podmioty przetwarzające

Obsługiwane przez ClearCloud na własnej infrastrukturze: uwierzytelnianie (Keycloak), pomiar oglądalności (Matomo, matomo.clearcloud.fr), monitoring, logi, sejf sekretów.

Historia zmian

22 paź 2026 Zmiana Regions: six UpCloud probes in service

The Stockholm, Copenhagen, New York, San José, Singapore and Sydney regions are checked by a probe located in the city, at UpCloud, earlier than announced in the notice of 21 October. Stockholm and Copenhagen are in the European Union. New York and San José (United States), Singapore and Sydney (Australia) are outside the European Union: only the monitors for which you pick one of these regions send their check requests there, with their credentials if they have any, under standard contractual clauses. No monitor uses these regions unless you pick them, and no account data is stored there.

21 paź 2026 Wypowiedzenie Regions: notice of six new UpCloud probes

30-day notice: no earlier than 30 days after this notice, the Stockholm, Copenhagen, New York, San José, Singapore and Sydney regions will be checked by a probe located in the city, at UpCloud (an existing sub-processor). New York and San José (United States), Singapore and Sydney (Australia) are outside the European Union: only monitors that pick one of these regions send their check requests there, with their credentials if they have any, under standard contractual clauses. No account data is stored there.

14 paź 2026 Usunięcie Infomaniak removed: OKStatus's status page is at OVHcloud

Since 29 September 2026, OKStatus's own status page (status.okstatus.eu) and its probes are hosted by OVHcloud in Gravelines (France), still outside the monitored platform, which is at Scaleway. The Infomaniak cluster in Geneva was emptied the same day; Infomaniak no longer processes any data and leaves the list. Cloudflare still serves this page.

14 paź 2026 Dodanie OVHcloud SMS added for SMS alerts (optional)

SMS alerts are sent by OVHcloud SMS (OVH SAS, France), already a sub-processor for object storage and probes. This processing only takes place if your organization creates an SMS channel: OVHcloud then receives the mobile number entered in the channel and the alert text, or the code that verifies the number. Only European numbers (European Union, European Economic Area, United Kingdom, Switzerland) are accepted.

10 paź 2026 Dodanie UpCloud hosts the Frankfurt, Madrid, Amsterdam and Warsaw probes; Paris probe at Scaleway

The second European probe host announced on 2 September 2026 is UpCloud Oy (Helsinki, Finland). Since 10 October 2026 the Frankfurt, Madrid, Amsterdam and Warsaw regions are each checked by a probe located in the city, at UpCloud; the Paris region is checked from the platform cluster, at Scaleway; the London region stays at OVHcloud, in London. The other regions keep running from OVHcloud's London site until they get their own probe. No account data is entrusted to UpCloud: a probe receives the request to run, with the monitor's credentials if it has any, and returns the result.

28 wrz 2026 Dodanie Scaleway hosts the platform; Infomaniak, Cloudflare and push services added

Since 26 September 2026 the platform (applications, database, identities) is hosted by Scaleway in Paris; OVHcloud keeps object storage (backups, reports, logos) in Gravelines and the probes. Added to the list: Infomaniak (Geneva) and Cloudflare, which host and serve OKStatus's own status page, and browser push services, used only if you enable the push channel. The identity database backup, stored in London (OVHcloud) since the migration, is being moved back to Gravelines. Clarification on OVHcloud: public probes all currently run from its London site (United Kingdom, adequacy decision), whatever region is selected, until one probe per region is deployed.

6 wrz 2026 Usunięcie Plausible Analytics removed

Plausible Insights OÜ was listed although the service was never put in production: audience measurement is done by Matomo, self-hosted by ClearCloud (matomo.clearcloud.fr, France), which is therefore not a sub-processor. No data was ever sent to Plausible.

2 wrz 2026 Zmiana Dedicated page and second probe host

Unified list (DPA annex III, privacy policy, legal notices), exact locations, announcement of a second EU probe host (name announced with the 30-day notice).

1 kwi 2026 Dodanie Initial list

OVHcloud (hosting), Scaleway (transactional email), Stripe (payments), social sign-in providers.