How to read this list
A provider on this list processes customer personal information only when the related service is used or enabled. The actual providers and data locations for a customer may therefore be a subset of this list. Core platform hosting follows the regional commitment in the Platform Terms and Data Processing Addendum. A customer’s order form controls if it identifies a different supported region or contains a more specific commitment.
| Provider | Purpose | Data and location notes |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Regional application hosting, storage, backups, queues, document extraction, secrets, logging, security, content delivery, and email delivery | Core Customer Data and private service traffic remain in the customer’s selected AWS region. Content delivery, DNS, email delivery, recipient traffic, and limited AWS account, resource, or diagnostic metadata may use global or destination networks where the feature requires it |
| MongoDB, Inc. (MongoDB Atlas) | Dedicated production managed database infrastructure | Customer records and in-region database replicas remain in the Atlas region configured for the customer environment; limited provider account, support, and diagnostic metadata may be processed under MongoDB’s terms |
| Twilio Inc. | SMS, voice, telephone numbers, delivery status, and optional SendGrid email | Recipient contact, message or voice content, sender configuration, and delivery metadata; United States and provider network locations |
| Stripe, Inc. | Subscription billing and optional customer payment features | Customer billing contacts, transaction and payment metadata; payment-card data is provided directly to Stripe where its hosted components are used |
| Mapbox, Inc. | Mapping, address search, and geocoding in enabled People features | Addresses or location queries selected for mapping and technical request data; United States and provider network locations |
| Google LLC (Google Analytics) | Consented marketing-website analytics only | Website device and usage information after analytics opt-in; United States and other Google processing locations |
Changes and objections
We update this page before a new subprocessor begins materially different processing. Customers that require direct notices should write to legal@unionsoftware.com. Objections are handled under the Data Processing Addendum.