Trust & legal
Subprocessors
This page lists the third parties that may process customer data on behalf of DeptDrive. It is the current list referenced by our Data Processing Agreement.
Current subprocessors
| Subprocessor | Purpose | Processing location | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | Cloud infrastructure, object storage, network security and content delivery. | Western Europe (WEUR) | Cloudflare DPA; EU Standard Contractual Clauses and/or an applicable adequacy mechanism; encryption in transit and at rest. |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Payment processing, subscription billing and billing portal. | Ireland / United States | Stripe DPA; EU Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework where applicable. |
We do not use customer content for advertising. Payment card details are processed by Stripe and are not stored in DeptDrive's application database.
Changes and objections
We will give customers at least thirty (30) days' prior notice of a new subprocessor through the Services where required by the DPA. A customer may object on reasonable data protection grounds through the contact form before the change takes effect.
More information
- Read the Data Processing Agreement.
- Read the Privacy Policy and Terms and Conditions.
- Request the current signed DPA or security documentation through the contact form.