Sub-processors
The third parties that process customer data on our behalf, what each one does, and where it does it. This page is the list referred to in our data processing agreement.
Last updated
Current sub-processors
Each of these processes personal data contained in the email you send, or in the records of that email, so that we can run the service. The exception is PostHog, which sees only how our website and dashboard are used and never the email or its records. Nothing else has access to customer data.
| Name | Purpose | Location |
|---|---|---|
| Amazon Web Services | Amazon SES: sending email and receiving delivery, bounce and complaint events | eu-north-1, Sweden |
| Amazon Web Services | Amazon S3: message body storage, only on deployments where S3 storage is enabled | eu-north-1, Sweden |
| Stripe Payments Europe, Limited | Payment processing for paid plans: card details entered on our billing page, billing name and address, invoices and receipts | Ireland, with card data processed in the EU and the United States under Stripe's own transfer safeguards |
| Cloudflare, Inc. | Security, DDoS protection and routing in front of the website, dashboard and API. Every request passes through its network, including the content of emails sent to the API, which it carries through without storing. | Global network, at a location near the sender of each request. A US company; transfers are covered by the EU-US Data Privacy Framework and the EU Standard Contractual Clauses |
| PostHog Inc. | Usage analytics for our own website and dashboard: pages viewed, the referring site, campaign tags and a few named product events, linked to user and account ids when signed in. Cookieless, and never email content, recipients or domain names. | EU (Frankfurt) |
| Hosting provider (named here once the production box is chosen) | Hosting for the API, worker and dashboard | EU |
Card numbers never reach us: the payment processor's fields sit inside our billing page and the number is sent to the processor directly. What we hold of a card is its brand, last four digits and expiry.
Notice of changes
We give at least 30 days' notice before adding or replacing a sub-processor. Notice goes by email to account holders, and this page is updated with the date at the top.
To be told about changes, or to object to one on data protection grounds, write to privacy@avelto.dev. The right to object, and what happens if we cannot resolve an objection, are set out in our data processing agreement.