Draft: this document has not yet been reviewed by a lawyer. Do not rely on it until it has.
Sub-processors
Last updated: 25 October 2026
These companies help us run Optwise. Each is bound by a data processing agreement. We give customers at least 30 days' notice by email before adding a new one.
| Company | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting of the service and its database, content delivery, DNS, protection against attacks, visitor country lookup | Account data, consent records; IP address and request data in transit | Database stored in the EU (Cloudflare EU jurisdiction). Requests are handled at the nearest Cloudflare location. Transfers under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework |
| Sendinblue SAS (Brevo) | Sending account emails (welcome, password reset, payment reminders) | Email address, company name, email content | France |
| Stripe Payments Europe, Ltd. | Payments and invoicing (paid plans only) | Name, email, billing address, VAT number, payment details | Ireland |
Entries in square brackets will be confirmed before launch.