Differences

This shows you the differences between two versions of the page.

--- pub:trust_center:subprocessors [15.06.2025 22:16] – created Predrag Tasevski
+++ pub:trust_center:subprocessors [15.07.2026 06:37] (current) – [Self-Hosted Tools] Predrag Tasevski
@@ Line 4: / Line 4: @@
 Most of our infrastructure is managed and maintained on self-hosted private VPS instances, hosted in secure data centers located in Europe (France, Germany, and the Netherlands) via trusted providers such as Scaleway and OVHCloud.
+----
 ==== Self-Hosted Tools ====
 These tools are fully managed by the Unicis team and hosted in our private infrastructure within the EU:
-  * **Nextcloud** – A suite of client-server software for creating and using file hosting services. Used for internal collaboration and document sharing.
+  * **Nextcloud** – File storage and document management. Used for internal collaboration, document sharing, and file hosting.
-  * **Jitsi Meet** – Free and open-source multiplatform video conferencing. Used for secure video communication.
+  * **OnlyOffice** – Document editing suite integrated with Nextcloud. Used for collaborative editing of internal documents.
-  * **Matomo** – Privacy-focused web analytics platform. Used as an alternative to Google Analytics.
+  * **DokuWiki** – Company handbook and internal knowledge base. Hosted at handbook.unicis.tech.
-  * **Uptime Kuma** – Self-hosted monitoring tool. Used to monitor uptime and service health.
+  * **Jitsi Meet** – Open-source video conferencing. Used for larger team calls and external meetings.
-  * **Mautic** – Open-source marketing automation. Used for contact management, email campaigns, and web tracking.
+  * **Moodle** – Online training and course delivery. Used only for remote/external training services and EU project training deliverables — not internal team training.
-  * **EspoCRM** – CRM for lead, contact, and opportunity management.
+  * **Matomo** – Privacy-focused web analytics platform. Used as an alternative to Google Analytics for unicis.tech.
-  * **n8n** – Workflow automation tool used for system integrations and outreach automation.
+  * **Listmonk** – Self-hosted newsletter and email campaign platform. Replaces Mautic for all email marketing.
-  * **LimeSurvey** – Open-source survey tool used for user feedback and research.
+  * **Dolibarr** – Self-hosted CRM, ERP, and billing system. Used for customer, partner, vendor, and subscription management.
-  * **Metabase** – Business intelligence platform used for reporting and data visualization.
+  * **n8n** – Workflow automation tool. Used for system integrations and process automation.
-  * **NinjaInvoice** – Self-hosted invoicing system for tracking billing and payments.
+  * **LimeSurvey** – Open-source survey tool. Used for EU project surveys and customer feedback.
-  * **Wazuh** – Open-source security platform used for SIEM, security control monitoring, and vulnerability management.
+  * **FreeScout** – Self-hosted support inbox. Used to manage inbound support requests.
-  * **IRIS** – Self-hosted incident response management tool.
+  * **Metabase** – Business intelligence and analytics platform. Used for platform subscription dashboards and reporting.
-  * **Unicis Platform** – Used to manage MVSP and audit checklists, awareness, GDPR and risk management compliance
+  * **Fider** – Open-source product feedback and roadmap tool. Used for community-facing roadmap input.
+  * **OpenProject** – Project and work package management. Used for EU project deliverables and timesheets.
+  * **Vaultwarden** – Self-hosted password and secrets management. Used to securely store shared credentials.
+  * **Wazuh** – Open-source SIEM and security monitoring. Used for security control monitoring and vulnerability management.
+  * **Unicis Platform** – Used to manage MVSP and audit checklists, GDPR, and risk management compliance. Internal security awareness training is delivered via its Interactive Awareness Training Program module.
+----
 ==== Third-Party Service Providers ====
-These services are used only where necessary to support our operations and always with strict privacy and security reviews:
-  * **Atlassian** – Jira Service Desk, Jira, Confluence, and Statuspage for SLA management and technical documentation. [Atlassian Privacy Policy](https://www.atlassian.com/legal/privacy-policy)
+These services are used only where necessary to support our operations, always subject to privacy and security review:
-  * **Vimeo** – Hosting for demo and product videos. [Vimeo Privacy Policy](https://vimeo.com/privacy)
-  * **GitLab** – Used for source code repository, issue tracking, and code review. [GitLab Privacy Policy](https://about.gitlab.com/privacy/)
+  * **GitLab** – Source code repository, CI/CD pipelines, and MonitorBot for status page automation. [[https://about.gitlab.com/privacy/|GitLab Privacy Policy]]
-  * **GitHub** – Used for community edition source code and collaboration. [GitHub Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement)
+  * **GitHub** – Community edition source code and open-source collaboration. [[https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement|GitHub Privacy Statement]]
-  * **OVHCloud** – Domain name management and AI-related services. [OVHCloud Privacy Policy](https://www.ovhcloud.com/en/privacy-policy/)
+  * **OVHCloud** – Domain name management and VPS hosting (Germany). [[https://www.ovhcloud.com/en/privacy-policy/|OVHCloud Privacy Policy]]
-  * **Scaleway** – Bare-metal hosting for primary infrastructure. [Scaleway Privacy Policy](https://www.scaleway.com/en/privacy-policy/)
+  * **Scaleway** – Bare-metal hosting for primary infrastructure (France, Netherlands). [[https://www.scaleway.com/en/privacy-policy/|Scaleway Privacy Policy]]
-  * **Xolo.io** – Invoicing, tax reporting, and financial compliance. [Xolo Privacy Policy](https://www.xolo.io/privacy-policy)
+  * **Xolo.io** – Invoicing, tax reporting, and financial compliance (Estonia). [[https://www.xolo.io/privacy-policy|Xolo Privacy Policy]]
+  * **Vimeo** – Hosting for demo and product videos. [[https://vimeo.com/privacy|Vimeo Privacy Policy]]
+  * **Wise** – International banking and payment transfers. [[https://wise.com/gb/legal/privacy-policy|Wise Privacy Policy]]
+----
+==== AI Model Providers ====
+These services provide AI/LLM inference capabilities used by Unicis production systems:
+  * **OVHcloud AI Endpoints — Meta-Llama-3.3-70B-Instruct** – Serverless large language model inference API, hosted by OVHcloud in the EU (France). Endpoint: [[https://oai.endpoints.kepler.ai.cloud.ovh.net/v1|oai.endpoints.kepler.ai.cloud.ovh.net]]. [[https://www.ovhcloud.com/en/privacy-policy/|OVHCloud Privacy Policy]]
+----
 ==== Virtual Private Server (VPS) Providers ====
 Our core services are hosted in trusted European data centers:
-  * **OVH HOSTING LIMITED** – Server located in Germany. [OVH Terms and Conditions](https://www.ovhcloud.com/en/terms-and-conditions/)
+  * **OVH HOSTING LIMITED** – Server located in Germany. [[https://www.ovhcloud.com/en/terms-and-conditions/|OVH Terms and Conditions]]
-  * **Scaleway** – Bare metal servers in France and the Netherlands. [Scaleway Privacy Policy](https://www.scaleway.com/en/privacy-policy/)
+  * **Scaleway** – Bare metal servers in France and the Netherlands. [[https://www.scaleway.com/en/privacy-policy/|Scaleway Privacy Policy]]
+----
+For any questions about our subprocessors or data handling, contact [[mailto:privacy@unicis.tech|privacy@unicis.tech]].
+See also: [[pub:trust_center:tpsrm|Third-Party & Contractor Infrastructure Security (TPSRM)]]
+{{tag>trust-center subprocessors infrastructure privacy compliance}}