catchotp engages a small set of trusted Sub-processors to provide infrastructure, billing, and edge security for the Service. Each Sub-processor is bound by a written contract that imposes data-protection obligations no less protective than those in our Data Processing Agreement. The following list is current as of the "Last updated" date above.
| Sub-processor | Purpose | Region | Data shared | DPA |
|---|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Compute, storage, networking, key management (KMS), and inbound email infrastructure (Amazon SES). Underlying platform for the Service. | us-east-1 (Northern Virginia, USA) | All Customer Data, including email message content, metadata, account data, and audit logs. | AWS Service Terms / DPA |
| Stripe, Inc. | Subscription billing, payment processing, invoicing, and tax calculation for paid plans. | United States; EU (for European customers) | Billing email, organization name, country, tax ID, payment-method tokens, invoice history. Stripe stores card numbers; catchotp does not. | Stripe DPA |
| Cloudflare, Inc. | DNS, edge caching, TLS termination, web-application firewall, and DDoS protection for catchotp.com and api.catchotp.com. | Global edge network | IP addresses, request metadata, TLS handshake metadata, headers. Edge logs are short-lived. | Cloudflare Customer DPA |
Notifications about new Sub-processors
We give at least thirty (30) days' notice before adding a new Sub-processor or replacing an existing one. To subscribe to notifications, email subprocessors@catchotp.com with the subject "subscribe", or follow our changelog. If you reasonably object to a new Sub-processor on data-protection grounds within the notice period, your remedy is set out in our DPA.
Changes to this page
Material additions or removals will be reflected here and (where notice is required) communicated by email to subscribed customers. The "Last updated" date at the top of this page reflects the latest change.
Contact
Questions about our Sub-processors? Email privacy@catchotp.com.