Subprocessors & Data Handling

Third-party vendors that may process customer data in service delivery

Subprocessor Notification

This list is updated as subprocessors are added or changed. Enterprise customers are notified of material changes per contractual terms. Complete vendor documentation available upon request.

Current Subprocessors

Vendor	Purpose	Data Categories	Notes
Cloud Infrastructure Provider	Application and database hosting	All customer data, application data, backups	SOC 2 Type II certified. Data Processing Agreement in place.
Email Service Provider	Transactional and notification emails	Email addresses, notification content	GDPR compliant. Standard data processing terms apply.
Monitoring & Analytics	Application performance monitoring, error tracking	System logs, error traces (PII minimized)	Data Processing Agreement in place. PII filtering enabled.
Payment Processor	Subscription billing and payment processing	Payment information, billing records	PCI DSS Level 1 certified. Direct integration with customer consent.

Data Protection Measures

Vendor Vetting

All subprocessors undergo security and privacy assessments prior to engagement. We evaluate certifications, data handling practices, security controls, and compliance capabilities.

Contractual Protections

Data Processing Agreements (DPAs) or equivalent contractual protections are in place with all subprocessors that handle customer data. These agreements include confidentiality, security requirements, and data handling restrictions.

Ongoing Monitoring

Subprocessor performance and compliance are monitored on an ongoing basis. We review security incidents, audit reports, and certification renewals to ensure continued adequacy.

Customer Rights

Enterprise customers may request additional information about subprocessors, including audit reports and certifications, subject to confidentiality agreements. Customers are notified of material changes to subprocessor lists per contractual terms.

Need More Details?

Request complete vendor documentation, DPAs, or subprocessor audit reports