Subprocessors

Effective: 13 October 2026

Last updated: 13 October 2026

Version: 1.0

These are the third parties that process personal data on behalf of Sysplore customers. Each is bound by a written data protection agreement.

Name	Purpose	Data processed	Location	Used for
Akamai Technologies, Inc. (Linode)	Cloud hosting for the mail, auth, workspace and console cells, with attached block storage	Customer account data and the Content stored on the platform	United States	Sysplore Mail, Sysplore Workspace and Sysplore Cloud
Cloudflare, Inc.	DNS, edge delivery, the WAF in front of the origin, the tunnel that reaches the origin, and video calling in the support widget (Cloudflare RealtimeKit)	Connection data such as IP address and request metadata, and call media for support video	Global edge network, United States entity	The website, the console and the Products
Amazon Web Services, Inc. (Amazon SES)	Delivery of outbound email	Email addresses and the message metadata needed to deliver mail	United States	Sysplore Mail
Backblaze, Inc. (Backblaze B2)	Object storage for mail objects, backups, datastore snapshots and infrastructure state	Customer Content (mail objects) and backups	United States	Sysplore Mail, and backup for the platform
Stripe, Inc.	Payment processing, invoicing and related billing, where we are the seller of a purchase	Name, billing contact details and payment instrument data	United States	Billing
Polar Software, Inc. (polar.sh)	Merchant of Record where Polar is the seller of record: it is the seller on the receipt, collects and remits the applicable sales tax, value added tax or goods and services tax, and administers refunds and payment disputes for that purchase	Name, billing contact details, order data and payment instrument data	United States	Purchases where Polar is the seller

We notify account holders by email at least 30 days before we add or replace a subprocessor that handles customer personal data, and we update this page on the same day. Account holders may object in writing to [email protected] within that period, as described in the Data Processing Agreement.