MASProTechnology & providers
Security and service providers
This English version is provided for convenience. In case of discrepancies, the German version prevails.
Depends on configuration: Not every service listed here automatically receives data. Many providers are used only if an club selects, connects and uses the function concerned.
Security principles
- TLS-encrypted transmission and secure storage of credentials and secrets.
- Role- and permission-based access, with separate development and production environments.
- Logging of security-relevant events, plus update, backup and recovery procedures.
- Data minimisation, purpose limitation and review of integrations and permissions.
- Procedures for detecting, assessing and handling security incidents.
Service providers and categories of recipients
| Category | Provider / technology | Purpose and use |
|---|---|---|
| Infrastructure & storage | Hetzner; self-hosted Supabase/PostgreSQL and Redis-compatible components | Hosting, database, object storage, cache and platform operations. |
| Google services | Google Cloud, Drive, Sheets, Gmail, Firebase, Data Manager, Gemini | Only depending on the activated sign-in, file/spreadsheet function, email, push, conversion or AI function. |
| Microsoft | Microsoft 365 | Optional email and account integration. |
| Payments | Stripe / Stripe Connect | Optional payment processing, merchant onboarding and status reporting. |
| Messaging | Meta/WhatsApp, Bird/MessageBird, Vonage, httpSMS, Messaggio | Optional messaging, SMS and delivery functions. |
| Resend, Emailit and connected mailboxes | Transactional communication and communication initiated by the customer. | |
| AI | OpenAI, Anthropic, Mistral, Google Gemini | Only for activated assistance, generation or analysis functions; inputs should be kept to a minimum. |
| Documents & post | pdfRest, Pingen, OnlineBrief24 | Optional PDF processing, printing or letter dispatch. |
| Banking | BanksAPI, Nevlo | Optional account transaction and reconciliation functions. |
| Maps & error analysis | Mapbox, Sentry | Optional map/location display and technical error diagnostics. |
Depending on the product, the contracting party and the region, a provider may itself act as a controller or as a processor. Details follow from its documentation, the customer configuration and the specific instructions. Material changes to this overview are published here.
Responsible use
Clubs should activate only the integrations they need, review permissions regularly, avoid special categories of personal data or protect them with particular care, and disconnect connections that are no longer required.
Security contact
Confidential reports: office@pock.biz. Please also see our vulnerability disclosure policy.