# Sub-processors

Version 2026-10-01.

## In plain words

- Two companies can touch data we process for you: the company that hosts our server, and the company that stores our encrypted backups.
- Neither of them ever gets your mail's content from us. Our delivery network does not store it, so there is none to hand over.
- We email your account owner and update this page at least 30 days before we add or replace one, and you can object.

## Sub-processors for our delivery network

These process personal data on your behalf under our [data processing agreement](https://emailplane.com/legal/dpa/).

| Company | What it does for us | What it can touch | Where |
|---|---|---|---|
| SSDNodes, with its upstream provider HIVELOCITY, Inc. | Hosts the server our delivery network runs on. | Mail in memory while it passes through, and the data we store about your service (your server's public key, domains, limits, invite recipient list, counts, audit trail and logs). | Data centre in Atlanta, Georgia, USA |
| Cloudflare, Inc. (R2 storage) | Stores our nightly backups. | The data we store about your service, encrypted on our server before it is uploaded. Never mail content. | US company; storage location per bucket setting: {{R2_LOCATION}} |

## Providers for our own website, accounts and billing

For these we decide how data is used, so they are our service providers rather than your sub-processors. Our [Privacy Policy](https://emailplane.com/legal/privacy/) explains what each receives.

| Company | What it does for us | Where |
|---|---|---|
| SSDNodes, with HIVELOCITY, Inc. | Hosts our website, your account with us and our dashboard. | Atlanta, Georgia, USA |
| Cloudflare, Inc. | Delivers and protects our website and answers DNS for our domain names. It sees website visitors' IP addresses. It never carries mail. | Global network; US company |
| Cloudflare, Inc. (R2 storage) | Stores our encrypted backups, which include account data. | US company; storage location per bucket setting: {{R2_LOCATION}} |
| Stripe, Inc. | Will process payments when paid plans open: card details, billing address, tax ID and invoices. | United States |

## Who is not on this list, and why

- **Your own server and hosting company.** Your mailboxes, messages and keys live on a server you control, with a provider you choose. We have no access to them.
- **Certificate authorities** that issue the TLS certificates for our own host names see those host names only.
- **No AI company receives your data from us.** We use AI coding tools to build our software, and they have no access to mail passing through our delivery network.

## Changes

| Date | Change |
|---|---|
| 2026-10-01 | First published list. |

To hear about changes, keep your account owner's email address up to date. To object to a change, email [privacy@emailplane.com](mailto:privacy@emailplane.com) within 30 days of our notice.

---

Source: https://emailplane.com/legal/subprocessors/