Sub-processors

Website delivery, security, and managed application infrastructure.

Data:

Request metadata, IP addresses, and service data needed to deliver and protect the website.

Region:

Global processing locations under the provider's data-protection terms

Applies when:

Core service

Account services for a limited set of existing account paths.

Data:

Email, name, identity reference, organization membership, and session metadata.

Region:

Provider processing locations under the applicable data-protection terms

Applies when:

Certain existing accounts

Service and account email delivery.

Data:

Recipient email address, message content, and delivery metadata.

Region:

Provider processing locations, including the United States

Applies when:

Optional feature used

Customer-requested cloud and AI workloads when an applicable service is used.

Data:

Workload inputs, outputs, operational metadata, and configuration required for the requested service.

Region:

Service- and contract-specific processing locations

Applies when:

Optional feature used

Cookieless, privacy-first web analytics.

Data:

Aggregate page views, referrers, low-cardinality event tags (no PII).

Region:

European Union

Applies when:

Optional feature used

Customer identity, account data, preferences, and account lifecycle services.

Data:

Identity, profile, preferences, customer-created records, usage, and account lifecycle state.

Region:

European Union, with support and sub-processors as described in the provider terms

Applies when:

Core service

Payment, subscription, and invoice processing when a paid service is used.

Data:

Billing contact details and payment or transaction metadata required for the selected service.

Region:

Provider processing locations in the EU and United States under the provider terms

Applies when:

Optional feature used