OKStatus security, no grey areas.

The Stockholm, Copenhagen, New York, San José, Singapore and Sydney regions are checked by a probe located in the city, at UpCloud, earlier than announced in the notice of 21 October. Stockholm and Copenhagen are in the European Union. New York and San José (United States), Singapore and Sydney (Australia) are outside the European Union: only the monitors for which you pick one of these regions send their check requests there, with their credentials if they have any, under standard contractual clauses. No monitor uses these regions unless you pick them, and no account data is stored there.

30-day notice: no earlier than 30 days after this notice, the Stockholm, Copenhagen, New York, San José, Singapore and Sydney regions will be checked by a probe located in the city, at UpCloud (an existing sub-processor). New York and San José (United States), Singapore and Sydney (Australia) are outside the European Union: only monitors that pick one of these regions send their check requests there, with their credentials if they have any, under standard contractual clauses. No account data is stored there.

Since 29 September 2026, OKStatus's own status page (status.okstatus.eu) and its probes are hosted by OVHcloud in Gravelines (France), still outside the monitored platform, which is at Scaleway. The Infomaniak cluster in Geneva was emptied the same day; Infomaniak no longer processes any data and leaves the list. Cloudflare still serves this page.

SMS alerts are sent by OVHcloud SMS (OVH SAS, France), already a sub-processor for object storage and probes. This processing only takes place if your organization creates an SMS channel: OVHcloud then receives the mobile number entered in the channel and the alert text, or the code that verifies the number. Only European numbers (European Union, European Economic Area, United Kingdom, Switzerland) are accepted.

The second European probe host announced on 2 September 2026 is UpCloud Oy (Helsinki, Finland). Since 10 October 2026 the Frankfurt, Madrid, Amsterdam and Warsaw regions are each checked by a probe located in the city, at UpCloud; the Paris region is checked from the platform cluster, at Scaleway; the London region stays at OVHcloud, in London. The other regions keep running from OVHcloud's London site until they get their own probe. No account data is entrusted to UpCloud: a probe receives the request to run, with the monitor's credentials if it has any, and returns the result.

Since 26 September 2026 the platform (applications, database, identities) is hosted by Scaleway in Paris; OVHcloud keeps object storage (backups, reports, logos) in Gravelines and the probes. Added to the list: Infomaniak (Geneva) and Cloudflare, which host and serve OKStatus's own status page, and browser push services, used only if you enable the push channel. The identity database backup, stored in London (OVHcloud) since the migration, is being moved back to Gravelines. Clarification on OVHcloud: public probes all currently run from its London site (United Kingdom, adequacy decision), whatever region is selected, until one probe per region is deployed.

Plausible Insights OÜ was listed although the service was never put in production: audience measurement is done by Matomo, self-hosted by ClearCloud (matomo.clearcloud.fr, France), which is therefore not a sub-processor. No data was ever sent to Plausible.

Unified list (DPA annex III, privacy policy, legal notices), exact locations, announcement of a second EU probe host (name announced with the 30-day notice).

OVHcloud (hosting), Scaleway (transactional email), Stripe (payments), social sign-in providers.