Legal
Sub-processors
Not yet reviewed by a lawyer.
This document describes how the product actually behaves, which is the part worth
getting right first. It is not legal advice and must be reviewed by qualified
counsel in your jurisdiction before the service is sold.
The third parties that process customer data in the course of providing this service. We give thirty days' notice before adding to this list.
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| DigitalOcean | Application hosting and managed database | All customer data | Primary hosting region |
| Stripe | Payment processing and tax calculation | Billing contact, payment method, invoices | Global |
| Transactional email provider | Invitations, password resets, alerts | Recipient name and email address | Configured per deployment |
No analytics, advertising, session recording, or customer support widget is embedded in the service, so none appears on this list.
Last updated September 2026 · CyberRisk Protection Ltd