Sub-processors
Version 2026-10-01.
In plain words
- Two companies can touch data we process for you: the company that hosts our server, and the company that stores our encrypted backups.
- Neither of them ever gets your mail's content from us. Our delivery network does not store it, so there is none to hand over.
- We email your account owner and update this page at least 30 days before we add or replace one, and you can object.
Sub-processors for our delivery network
These process personal data on your behalf under our data processing agreement.
| Company | What it does for us | What it can touch | Where |
|---|---|---|---|
| SSDNodes, with its upstream provider HIVELOCITY, Inc. | Hosts the server our delivery network runs on. | Mail in memory while it passes through, and the data we store about your service (your server's public key, domains, limits, invite recipient list, counts, audit trail and logs). | Data centre in Atlanta, Georgia, USA |
| Cloudflare, Inc. (R2 storage) | Stores our nightly backups. | The data we store about your service, encrypted on our server before it is uploaded. Never mail content. | US company; storage location per bucket setting: {{R2_LOCATION}} |
Providers for our own website, accounts and billing
For these we decide how data is used, so they are our service providers rather than your sub-processors. Our Privacy Policy explains what each receives.
| Company | What it does for us | Where |
|---|---|---|
| SSDNodes, with HIVELOCITY, Inc. | Hosts our website, your account with us and our dashboard. | Atlanta, Georgia, USA |
| Cloudflare, Inc. | Delivers and protects our website and answers DNS for our domain names. It sees website visitors' IP addresses. It never carries mail. | Global network; US company |
| Cloudflare, Inc. (R2 storage) | Stores our encrypted backups, which include account data. | US company; storage location per bucket setting: {{R2_LOCATION}} |
| Stripe, Inc. | Will process payments when paid plans open: card details, billing address, tax ID and invoices. | United States |
Who is not on this list, and why
- Your own server and hosting company. Your mailboxes, messages and keys live on a server you control, with a provider you choose. We have no access to them.
- Certificate authorities that issue the TLS certificates for our own host names see those host names only.
- No AI company receives your data from us. We use AI coding tools to build our software, and they have no access to mail passing through our delivery network.
Changes
| Date | Change |
|---|---|
| 2026-10-01 | First published list. |
To hear about changes, keep your account owner's email address up to date. To object to a change, email privacy@emailplane.com within 30 days of our notice.