1. Overview and statutory commitment
Under Article 28 of the EU General Data Protection Regulation (GDPR) and our Data Processing Agreement, Deployxa provides this directory of third-party subprocessors engaged to assist in delivering, securing, and maintaining our cloud platform.
Before engaging any subprocessor, Deployxa conducts a thorough security, privacy, and compliance evaluation. Each vendor is bound by data processing agreements containing data protection obligations no less restrictive than those in our DPA, including the EU Standard Contractual Clauses (SCCs) where international data transfers occur.
2. Core cloud infrastructure and hosting
These subprocessors provide the physical servers, virtualization, routing, edge networks, and storage infrastructure for Deployxa:
| Subprocessor | Purpose | Data Processed | Hosting Location |
|---|---|---|---|
| Cloudflare, Inc. | Edge DNS, DDoS mitigation, SSL termination and CDN proxying | Inbound network traffic, IP addresses, HTTP headers | Global Edge Network |
| Amazon Web Services (AWS) | Cloud compute virtualization, build runners, distributed cache and encrypted backups | Application code, build logs, compiled artifacts, container volumes, encrypted backups | United States / European Union |
3. Authentication, communication and billing
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google LLC (Firebase) | Identity management, OAuth 2.1 authentication, session tokens | User email addresses, user identifiers, authentication logs | United States / Global |
| Stripe, Inc. | Payment processing and subscription billing | Payment card details (tokenized), billing names, transaction records | United States / EU |
| Paystack Payments Ltd | Regional payment processing and transaction settlement | Card identifiers, phone numbers, transaction reference numbers | Nigeria / Kenya / Global |
| Zoho Corporation | Transactional emails, deployment status alerts, customer notices | Recipient email addresses, system notifications | United States / EU / India |
4. Subprocessor updates and notifications
Deployxa will notify customers of any planned additions or replacements of subprocessors via email or through the dashboard at least 30 days in advance. Customers may object to a new subprocessor on reasonable data protection grounds as provided in our Data Processing Agreement. For any questions regarding subprocessors, contact [email protected].
Questions about this document? Email [email protected].