Subprocessors
EquatorOps uses a limited set of third-party service providers ("subprocessors") to help deliver, secure, and improve our platform. Each subprocessor is evaluated for security posture and bound by data processing agreements.
What Are Subprocessors?
A subprocessor is a third-party service provider that processes data on our behalf to deliver specific platform capabilities. We carefully select subprocessors based on their security practices, data handling standards, and compliance certifications.
We maintain data processing agreements with all subprocessors that require them to protect your data to the same standards we apply internally. Subprocessors are only granted access to the minimum data necessary to perform their function.
Current Subprocessors
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Microsoft Azure | Cloud infrastructure and hosting | All customer data | United States |
| Hetzner | Cloud infrastructure and hosting | All customer data | United States, Germany / European Union |
| Amazon Web Services (AWS) | Cloud infrastructure, hosting, and object storage (S3) | All customer data (US); limited object storage only (China) | United States, China |
| Mandrill (Mailchimp Transactional) | Transactional email delivery | Email addresses, notification content | United States |
| Plausible Analytics | Privacy-respecting website analytics | Anonymized usage data (no PII) | European Union |
| Stripe | Payment processing and billing | Billing information, payment details | United States |
| Sentry | Error monitoring and performance tracking | Error logs, performance traces (no customer data) | United States |
| Cloudflare | CDN, DDoS protection, DNS | Network traffic metadata | Global (edge network) |
Data Processing Locations
The majority of customer data processing occurs in the United States. Specific subprocessors may process limited data in other regions as noted in the table above. Where data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses.
Enterprise customers with specific data residency requirements should contact us to discuss available options.
Changes to This List
We update this page when we add or remove subprocessors. Material changes (new subprocessors that access customer data) will be communicated to customers with at least 30 days' notice before the change takes effect.
If you have concerns about a new subprocessor, you may contact us within the notice period to discuss alternatives. We are committed to working with customers to address data processing concerns.
Questions
For questions about our subprocessors or data processing practices, contact us at: