TC.04Subprocessor list
Live registry, 30-day change notification.
Every subprocessor that touches customer data — name, function, region of processing, certification status. Subscribe to changes via the trust desk; new or changed subprocessors notified 30 days before activation under standard DPA terms.
TC.04.LRLive registry · 10 entries
| Code | Subprocessor | Function | Region of processing | Certifications |
|---|---|---|---|---|
| SP.001 | AWS · EU regions | Compute, storage, network for managed-SaaS deployments | EU (eu-west-1, eu-central-1, eu-north-1) | SOC 2ISO 27001ISO 27017ISO 27018C5 |
| SP.002 | Microsoft Azure · EU | Compute, storage for customer-cloud deployments (DM.02) | EU (West Europe, North Europe) | SOC 2ISO 27001C5 |
| SP.003 | Google Cloud · EU | Compute, storage for customer-cloud deployments (DM.02) | EU (europe-west1, europe-west4) | SOC 2ISO 27001C5 |
| SP.004 | Cloudflare | Edge CDN, WAF, DDoS protection | Global edge · EU PoPs prioritised | SOC 2ISO 27001PCI DSS |
| SP.005 | Fastly | Optional secondary edge for marketplace tenants | Global · EU PoPs | SOC 2ISO 27001 |
| SP.006 | Datadog | Application observability + log aggregation | EU region (Frankfurt) | SOC 2ISO 27001HIPAA |
| SP.007 | PagerDuty | On-call alerting + incident response coordination | EU region | SOC 2ISO 27001 |
| SP.008 | Sentry | Error tracking + performance monitoring | EU region | SOC 2ISO 27001 |
| SP.009 | Twilio (SendGrid) | Transactional email delivery | EU + US · per-tenant routing | SOC 2ISO 27001 |
| SP.010 | Stripe | One of multiple Payvera-orchestrated payment rails | EU region | SOC 2PCI DSS Level 1 |
TC.04.NX · subscribe to changes
Get notified 30 days before any change.
Subprocessor change notifications go to your trust desk contact under standard DPA terms. Any addition, region change or function change routes 30 days in advance with the rationale and the data classes affected.