DRAFT — requires lawyer review. Not legal advice.
Dropwarden Subprocessors
Last updated: TBD
TBD uses the third parties below to provide Dropwarden. Each one processes personal data only to deliver its part of the Service, under a written data processing agreement. This list forms Annex III of our Data Processing Addendum.
Entries marked (verify) are not yet confirmed against the provider's current contract or configuration and must be checked before publication.
Current subprocessors
| Subprocessor | Purpose | Personal data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Oracle Corporation (Oracle Cloud Infrastructure) | Hosts the compute instance that runs the whole Service (file server, portal, API, notifications, malware scanner, database), block storage, secrets vault, bastion and networking | All data handled by the Service while it is processed: account and user data, authentication data, audit events, notification configuration, and file contents in transit (files stream through the instance and large uploads are staged on its disk until complete) | Region us-sanjose-1 |
Oracle Data Processing Agreement; SCCs / Data Privacy Framework where applicable (verify) |
| Cloudflare, Inc. (R2 object storage) | Stores customer files, file versions and quarantined files; stores encrypted database backups in a separate bucket. DNS for our domains (verify) | File contents and file and folder names; encrypted backups of our database (account data, audit events) | Default buckets: location chosen by Cloudflare based on the bucket's location hint (verify the exact region for our buckets). Organizations configured for EU storage: bucket in Cloudflare's EU jurisdiction | Cloudflare Data Processing Addendum with SCCs; Data Privacy Framework (verify) |
| Stripe, Inc. and affiliates | Subscription billing, payment processing, invoices, tax calculation (Stripe Tax), fraud prevention | Billing contact name, email, billing address, tax ID, subscription and invoice history. Payment card data is collected directly by Stripe; we never receive full card numbers | United States and other countries where Stripe operates (verify the contracting Stripe entity for EU customers) | Stripe Data Processing Agreement with SCCs; Data Privacy Framework (verify) |
| Amazon Web Services, Inc. (Amazon SES) | Sends service emails: sign-up, security, billing, trial and deletion notices, and the activity notifications and digests that customers configure | Recipient email addresses, sender display name, email content. Notification content can include usernames, file and folder names, IP addresses and event times unless the organization turns on filename redaction. Bounce and complaint status | United States, region us-east-1 (verify) |
AWS Data Processing Addendum (part of the AWS Service Terms) with SCCs (verify) |
| Crisp IM SAS (chat widget) | Live chat and support conversations on the marketing site at dropwarden.com and in the portal at app.dropwarden.com only. Not loaded in the web file client (verify) |
Chat messages and attachments, name and email if provided, visitor identifier, IP address, browser and device information, pages visited during the chat session | European Union (verify) | Crisp Data Processing Agreement (verify) |
Not subprocessors
These parties receive data only because a customer or user chooses to send it there. They are not engaged by us to process Customer Data, so they are not on this list:
- Slack, Microsoft Teams and any webhook, SFTP, S3 or HTTPS destination a customer configures for notifications, audit streaming or automations;
- a customer's own storage bucket ("bring your own bucket");
- identity providers a user chooses to sign in with (Google, Microsoft or the customer's own SSO);
- Let's Encrypt, which issues TLS certificates and sees only domain names.
Our external uptime monitoring and public status page provider: TBD (verify whether it receives any personal data, for example subscriber emails, and add it here if so).
Change notice and right to object
- Notice. At least 30 days before a new subprocessor starts processing personal data, or before an existing one changes its purpose or processing location, we email the owners of every customer organization and update this page with the date of the change.
- Subscribe. Anyone else (for example a customer's privacy team) can ask to receive these notices by
writing to
[email protected]with the subject "Subprocessor notices". - Objection. A customer may object on reasonable data protection grounds by writing to
[email protected]within the 30-day period. We will try to resolve the objection, for example with a configuration that avoids the new subprocessor. If we cannot, the customer may terminate the affected service and receive a pro-rata refund of prepaid fees for the unused term. - Emergencies. If a subprocessor must be replaced urgently to keep the Service secure or available, we may give shorter notice. We will notify customers as soon as possible, and the objection right still applies.
Change history
| Date | Change |
|---|---|
| TBD | Initial list |