Sub-processors
Last updated: 25 July 2026
The third parties Ignela (Spearhead Analytics Limited) uses to process data, with their role, location, and the safeguard for any non-EU transfer. We update this list before adding or removing a sub-processor and notify affected customers. See our Privacy Policy for context.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Amazon Web Services | Application hosting and encrypted backup storage — all per-tenant data at rest | EU region by default for EU customers | EU SCCs + AWS DPA |
| Cloudflare | TLS, CDN, DDoS protection, WAF | USA (global edge) | EU SCCs + Cloudflare DPA |
| Clerk | Authentication & identity (login, MFA, organizations) | USA | EU SCCs + Clerk DPA |
| Stripe | Subscription billing (no card data held by us) | USA | EU SCCs + Stripe DPA |
| Postmark | Transactional email (auth, invites, alerts) | USA | EU SCCs |
| Vercel | Marketing site & docs hosting; cookieless web/analytics (no tenant data) | USA | EU SCCs + Vercel DPA |
| ImprovMX | Inbound business-email forwarding for our published addresses | USA | Standard transfer terms |
Notes
- Your connected warehouse is a data source, not our sub-processor. When you connect a warehouse (for example Google BigQuery), you own that account; we hold a credential to run your SQL on your instruction. Rows returned are cached per-tenant in our AWS-hosted store (where AWS is the sub-processor).
- Data residency. Primary storage is provisioned in an EU region by default for EU-resident customers. US-based sub-processors are covered by EU Standard Contractual Clauses. A fully EU-only deployment is available on request.
- Error-monitoring and log-aggregation providers may be added in future; this list will be updated before they process any data.