Start a project Sign in
Transparency

Sub-processors.

Every third party that can process data on our behalf is listed here. The list changes rarely, and never without notice.

01

Current list

Sub-processorPurposeRegionData touched
Amazon Web ServicesCompute, storage, managed databaseap-south-1, eu-central-1All platform data
CloudflareCDN, WAF, DDoS protectionGlobal edgeRequest metadata
StripeCard and ACH payment processingUS, EUBilling contact, payment token
SendGridTransactional emailUSEmail address, message content
DatadogMetrics, logs, traceseu-central-1Operational telemetry, pseudonymous ids
AnthropicLanguage generation for content modulesUSProduct attributes, no customer identifiers
02

How changes are announced

●Thirty days’ written notice before a new sub-processor begins processing.●Notice goes to the alert contacts on each account and appears in the console.●You may object in writing within the notice period; we work to a substitute or you may terminate the affected service.
03

What none of them get

No sub-processor receives your end customers’ names, addresses or payment details. Decision inputs are pseudonymous by design — a dimensional identifier, not a person.

04

Change history

DateChangeStatus
02 Jun 2026Datadog region moved to eu-central-1Complete
14 Mar 2026Anthropic added for content generationComplete, no objections
08 Jan 2026Legacy email vendor removedComplete
Talk to us Back to Trust & Security