Draft. This document is being reviewed and is not yet in force.
Spotless sub-processors
Last updated: [[date]]
| Company | What it does for Spotless | Data | Where |
|---|---|---|---|
| [[DigitalOcean, LLC]] [[confirm]] | Application servers and managed database | All Customer data | [[India, Bangalore]] |
| Cloudflare, Inc. | Photo storage (R2); [[DNS and network protection, if used]] | Photos, report PDFs, problem-report screenshots | [[Location hint: Asia-Pacific; may be outside India]] |
| [[Amazon Web Services, Inc.]] [[confirm]] | Encrypted nightly database backups | All Customer data, in backups | [[India, Mumbai]] |
| Expo (650 Industries, Inc.) | Delivering push notifications to phones | Push token, notification text | United States |
| Google LLC (Firebase Cloud Messaging) | Delivering push notifications to Android phones | Push token, notification text | Global |
| Apple Inc. (Apple Push Notification service) | Delivering push notifications to iPhones | Push token, notification text | Global |
| [[Resend, Inc.]] | Sending email (invites, password resets, messages a person chose by email) | Email address, message content | [[United States]] |
| Optional: Telegram (Telegram Messenger Inc. / Telegram FZ-LLC) | Messages for people who turn on Telegram | Telegram chat ID, message text, photos and reports managers choose to receive | Global |
| Optional: Meta Platforms, Inc. (WhatsApp Business Platform) | Messages for people who turn on WhatsApp | Phone number, message text, photos and reports managers choose to receive | Global |
| Optional: [[Functional Software, Inc. (Sentry)]] | Error reports, if enabled | Error details, account ID, device and app version; no names or photos | [[United States]] |
Changes are announced to Customers at least [[30]] days before they take effect (Data Processing Agreement, section 4).