Data Protection & GDPR
Compliance information for customers and their data subjects.
Last updated October 8, 2026
Data Processing Agreement
Where you process personal data of data subjects through our services, we act as your data processor and you act as the controller. A signed Data Processing Agreement is available on request from our support team.
Sub-processors
We use datacenter, network and payment sub-processors. The current list is maintained in your client area and we will notify you at least 30 days before adding a new sub-processor.
Data location
The region for your account is shown during checkout. Data is not replicated outside that region except in encrypted backups.
Security measures
- Encryption in transit (TLS 1.2+) for all customer interfaces.
- Encrypted at rest backups with separate credentials.
- Role based internal access with mandatory MFA and audit logging.
- 24/7 monitoring and an incident response procedure with 72 hour breach notification.
Requests from data subjects
Direct your data subjects to you as the controller. If a request reaches us directly we will forward it to you within 48 hours and assist you in responding.