LEGAL · GDPR ARTICLE 28
Subprocessors
Third-party services HowlOps relies on to deliver the platform. Controllers are notified 30 days before any addition; objection window is 30 days per the DPA. Last updated: 2026-05-28.
| Vendor | Purpose | Location | Transfers |
|---|---|---|---|
| Amazon Web Services (Ireland) | Primary compute + storage (Postgres, TimescaleDB, S3 backups) | Frankfurt + Dublin | EU only |
| Stripe Payments Europe Ltd | Subscription billing + VAT collection | Ireland | EU + US (SCCs) |
| Twilio Ireland Ltd | SMS + voice alert dispatch | Ireland + US | EU + US (SCCs) |
| Postmark / SendGrid | Transactional email delivery | US | EU → US (SCCs) |
| Cloudflare Inc | Edge DNS + DDoS protection | Global | EU → US (SCCs) |
| GitHub Inc (Microsoft) | Source control + CI runners for HowlOps engineering | US | EU → US (SCCs) |
Object to a new subprocessor: [email protected].