Subprocessors

Placeholder pending legal review. The categories below describe the intended structure; the specific named entities, their locations, and the notification period must be confirmed with counsel and kept current before launch.

What a subprocessor is

Where SendNectar processes personal data on a customer's behalf, we may engage third parties to help deliver the service. Those third parties are subprocessors. Each is bound by contractual obligations no less protective than those in our own Data Processing Addendum.

Your sending provider is not our subprocessor

This is the most important structural point on this page. SendNectar does not send your email. You connect your own provider account — SMTP, Amazon SES, SendGrid, Mailgun, Postmark, or Brevo — and delivery happens under your contract with that provider.

That provider is therefore your subprocessor, not ours. You choose it, you contract with it, and you decide where it processes your data. Most platforms bundle delivery and add their sending infrastructure to this list; because we unbundle it, that dependency is yours to control.

Categories we engage

• Cloud infrastructure and database hosting — compute, storage, and the primary datastore holding tenant records.
• Object storage — assets, import and export files, and generated documents.
• Background job and queue infrastructure — workflow step execution, scheduled retention jobs, and webhook delivery.
• Error monitoring and application logging — operational telemetry, configured to exclude message content.
• Payment processing — subscription billing and invoicing. Card details are handled by the processor and never reach SendNectar systems.
• Transactional email for our own account notifications — service messages such as invitations and password resets, distinct from your customer mail.
• Customer support tooling — the systems we use to receive and respond to your messages.

Current list

A table naming each subprocessor, the processing it performs, and the country in which it processes data will be published here and kept current.

Notification of changes

We intend to give advance notice before adding or replacing a subprocessor, giving customers a window to object. The mechanism for subscribing to those notices, and the length of the notice period, will be stated here.

International transfers

Where a subprocessor processes personal data outside the customer's jurisdiction, transfers will be covered by an appropriate safeguard, such as Standard Contractual Clauses. Region-aware retention policies in the product operate independently of this and remain the customer's own configuration.

Questions

Email [email protected] with any question about this list, or about a specific processing activity.