This page enumerates the sub-processors Driftstack engages to deliver the Service. It carries the same list as Section 7 of the Privacy Policy, which is the authoritative list (see Annex 3 of the Data Processing Agreement). How changes to the list take effect, and how to object, is described below.
The list below is intentionally short. Driftstack is a small, infrastructure-focused company and we keep the vendor surface tight on purpose — every additional sub-processor is one more place a breach can originate and one more party we owe a contract to.
What “sub-processor” means here
A sub-processor is a third-party processor engaged by Driftstack to process personal data on Customer’s behalf in the course of providing the Service. The term also covers a third-party processor engaged by Driftstack for processing that Driftstack does as controller under the Privacy Policy, such as support correspondence. This list does not cover:
- Vendors that only receive Driftstack’s own business data with no customer workload exposure (e.g. our HR provider), outside the processing the Privacy Policy describes.
- Vendors a customer chooses to integrate with directly (e.g. their own Slack workspace receiving Driftstack webhooks). Those are Customer-controlled and outside our processing chain.
Current sub-processors
| Sub-processor | Purpose | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Cloud | Compute infrastructure for the Driftstack control plane (production). | Account data, session metadata (encrypted at rest). | Falkenstein, Germany (EU). | EU-resident — no transfer required. |
| Neon (Databricks, Inc.) | Managed Postgres: the whole Driftstack database. | The whole Driftstack database. | Frankfurt (EU). | Data stored in the EU (Frankfurt). US company (Databricks, Inc., parent of Neon, LLC): EU-US Data Privacy Framework; 2021 Standard Contractual Clauses where it does not apply. |
| Amazon Web Services | Encrypted off-site backups of the Driftstack database (S3 object storage). | A full encrypted copy of our database; each copy is kept up to 40 days. | Frankfurt (EU). | Data stored in the EU (Frankfurt). Contracting company in the EU (Amazon Web Services EMEA SARL, Luxembourg). Any transfer to a country outside the EEA without an EU adequacy decision is covered by the EU Standard Contractual Clauses in Amazon’s data processing terms. |
| Cloudflare R2 | Object storage for customer-uploaded profile avatars, encrypted profile blobs, public status-page snapshots, and raw support email (messages and attachments) in a bucket with EU jurisdiction. | Avatar bytes, encrypted profile blobs, status-page snapshots (operational JSON), support email (raw message + attachments). | Default jurisdiction (data replicated EU + US); EU jurisdiction for the support-mail bucket. | 2021 Standard Contractual Clauses + EU-US Data Privacy Framework. |
| Cloudflare Email Routing / Workers | Receives every message sent to a @driftstack.dev or @driftstack.io address and passes it to the support inbox. | Inbound email envelope, headers, body, attachments. | Cloudflare edge (US corporate). | 2021 Standard Contractual Clauses + EU-US Data Privacy Framework. |
| Cloudflare Turnstile | Turnstile (a bot check on our sign-up, sign-in and account-security pages and the visitor support chat). | Visitor IP address, browser details and the page address. | Cloudflare edge (US corporate). | 2021 Standard Contractual Clauses + EU-US Data Privacy Framework. |
| Postmark | Transactional email (signup verification, password reset, billing notifications, support correspondence). | Recipient email, message body, deliverability metadata. | United States. | AC PM LLC (Postmark, an ActiveCampaign company), which states in its data processing agreement that it is certified under the EU-US Data Privacy Framework; 2021 Standard Contractual Clauses. |
| Sentry | Error monitoring and observability for the Driftstack control plane. | Stack traces, scrubbed request shape, account-id-only telemetry. | EU region (ingest.de.sentry.io). | Data stored in the EU region. US company: 2021 Standard Contractual Clauses + EU-US Data Privacy Framework. |
| Stripe | Payment processing, subscription management, and VAT handling via Stripe Tax (Dutch BTW for customers in the Netherlands; the reverse charge only for business customers in other EU countries with a valid VAT number). | Billing email, line-item description, amount, card token. | Stripe Payments Europe, Limited (Ireland) for every customer; Stripe, LLC (United States). | Contracting company in the EU (Stripe Payments Europe, Limited). US company (Stripe, LLC): EU-US Data Privacy Framework; where it does not apply, 2021 Standard Contractual Clauses in Stripe’s Data Transfers Addendum. |
| Confirmo Limited | Crypto payment processing: the hosted payment page, the payment address and the payment notices for crypto orders. | The order amount, the Plan, Driftstack’s order reference and an Account reference. | Ireland (EU). | Processes in the EU (Ireland); no transfer outside the EEA by Driftstack. |
| Anthropic | (1) Large language model for the optional AI agent feature, engaged in BYOK-proxy mode (your own key, used as you choose in your settings) or on AI Credits, included or bought (Terms §10.4; no separate opt-in); session data flows only when one of those modes is engaged on a turn. (2) Sorting and reply drafting for support correspondence (email and in-app Help), with a person approving every written reply, and answering the in-product support assistant under human oversight (a person can be reached at any time); never for security@, legal@, abuse@ or privacy@. | Customer-supplied prompts + session context for the turn. For support correspondence: the subject and text of the conversation, with the credentials Driftstack recognises removed; the address written to, the channel, the topic and the sender-authentication result; the subjects of recent conversations a person re-sorted, as labelled examples; the sender’s plan where the sender is a verified customer or a person linked the conversation to an account; for a verified customer, the account’s status, customer-since date, whether its email address is verified or failing delivery, and its number of active API keys (never key values); and, only to draft a reply, a verified customer’s billing basics (the subscription’s status and current period end, the dates and amounts of recent invoices including any amount refunded or disputed, the trial end date and the date of the first session) and, for a message sent from the desktop app, the app details the customer included with it (the app version, platform, deployment, session and profile identifiers, and the last error lines the app displayed). None of it is used to train any model. | United States. | 2021 Standard Contractual Clauses. |
| Moneybird | Accounting and invoicing operations for Driftstack. | Invoice line items, billing identity. | Netherlands (EU). | EU-resident — no transfer required. |
| MacStadium | Mac hardware hosting for the iPhone Safari session execution fleet. | Session execution state (transient). | United States. | 2021 Standard Contractual Clauses + EU-US Data Privacy Framework. |
| Green Mini host B.V. | Mac hosting for a serving machine of the browser fleet that can run Sessions: when a Session runs on it, it holds the Session’s browser profile (cookies and site storage) while the Session runs and deletes it from the machine when the Session ends, carries the Session’s page traffic to the egress proxy, sends the live view, runs the task or steps the Session is given, keeps input-timing data without the keys typed (up to 7 days), and keeps a technical log of Session events (Session ids, addresses visited, timings). | The Session’s browser profile (cookies and site storage) while the Session runs; the Session’s page traffic and live view; the task or steps the Session is given; input-timing data without the keys typed (up to 7 days); a technical log of Session events (Session ids, addresses visited, timings). | Netherlands (EU). | EU-resident — no transfer required. |
Production topology
The production control plane runs on Hetzner Cloud (compute) with Neon (managed Postgres) for account / session / audit data, a Redis cache on the same Hetzner server for auth-cache and rate-limit state, and Cloudflare R2 for object storage (avatars, encrypted profile blobs, public status snapshots). Every message sent to a Driftstack address is received by Cloudflare Email Routing / Workers, which pass it to the support inbox; raw support email is held in a separate R2 bucket with EU jurisdiction. The iPhone Safari session execution fleet runs on MacStadium Mac hardware and can also run on a Mac hosted by Green Mini host B.V. in the Netherlands.
Change notice + objection process
Section 3.4 of the Data Processing Agreement is the full rule: it sets when a change to this list takes effect, when we give notice of it, and how you can object. When we give notice, it is listed under “Change notices” below. To receive each notice by email as well, write to [email protected] and we add your address. It says who the sub-processor is, what it does, which data it handles, where, under which transfer mechanism, when the change takes effect, and the last day to object.
Your right to object. Every customer may object on reasonable data-protection grounds by writing to [email protected] within the notice period (for an urgent change, within 14 days of the notice; for a change published before Launch, as the Definitions define it, within 14 days of its publication). We discuss it with you and offer an alternative where we reasonably can. If we cannot resolve it within 14 days, you may end the affected service without penalty and we refund the unused part of any fees you paid in advance.
Change notices
No change notice is open.
Before Launch a change to this list takes effect on the day it is published, with no notice period (Section 3.4 of the Data Processing Agreement). To learn the day an entry was published, which starts its 14-day objection period, write to [email protected].
Contact
Questions about a specific sub-processor, our review process for adding new ones, or the SCCs in force for a transfer: [email protected].
Related
- Data Processing Addendum
- Privacy Policy
- /docs/security-overview — overall security posture + controls.
- docs.driftstack.io/reference/data-residency — where each kind of data is stored and processed today.