Sub-processors

Owner: Maja Schulz (list and DPAs), Mira Holm (security review)

The suppliers who process our customers' data on our behalf. The public version is on our trust page; we give customers 30 days' notice of any change to it.

Sub-processor	What for	Data	Where	Since
AWS	Hosting: databases, files, backups, queues, logs	Everything we hold for a customer	The customer's region: Frankfurt, London or Virginia	2019
Mailcrest	Notice emails	Recipient's name and email, the notice's text, delivery records	EU customers: Mailcrest's EU region since 16 October. UK and US customers: our original account, in the US. Delivery records kept 30 days.	2021
Textbridge	SMS sign-in codes	Mobile number, the code	UK and EU	May 2026
Atlassian (Jira, Confluence)	Support tickets and our wiki	Customers' staff names and emails in tickets; screenshots customers send	EU	2020
Google Workspace	Email with customers' staff	Names, emails, what they write to us	EU	2019

Not sub-processors: HubSpot holds our sales contacts at customers, not their people's data. GitHub holds our code and test data only. Emargen reads our code, Jira and this wiki; no customer production data goes into it.

Mailcrest's US message logs

On 12 October, while building ACM-296, engineering found that Mailcrest keeps its message logs for 30 days in the region of the account, and our one account was in the US (ACM-305). Every customer's notices had left their region in those logs. Mira chose a second account in Mailcrest's EU region on 13 October; EU customers' mail goes through it since 16 October (OPS-50). UK customers still go through the US account: see Data regions.

Change history

Version	Date	Who	What
1	6 Feb 2023	Mira	First list
7	20 Jan 2025	Mira	London region
9	19 Jan 2026	Maja	Virginia region
10	18 May 2026	Maja	Textbridge, for phone codes; DPA signed
11	13 Oct 2026	Mira	Mailcrest keeps logs in the account's region; ours was in the US
12	16 Oct 2026	Maja	Mailcrest EU account for EU customers; trust page updated