1. What is a subprocessor?
A subprocessor is a third-party service that processes customer data on our behalf to help us operate the Service. This page lists every subprocessor we use today, what they do, and where they operate. We update this list whenever subprocessors change.
2. Current subprocessors
| Provider | Purpose | Data categories | Primary location |
|---|---|---|---|
| Hetzner Online GmbH Privacy policy |
Primary application hosting, database infrastructure, primary honeypot sensor site | All customer data we hold, at rest and in transit; inbound attack traffic | Helsinki, Finland |
| Akamai Technologies, Inc. (operating Linode) Privacy policy |
Edge sensor hosting in multiple regions | Inbound attack traffic to our edge sensors. Not customer data. | Seattle WA (USA), Newark NJ (USA), Singapore; further regions as we expand |
| Paddle.com Market Limited (Merchant of Record) Privacy policy |
Payment processing, billing, sales tax, VAT / GST, chargebacks, fraud screening | Your payment card data, billing address, tax-residence information (collected directly by Paddle; never routed through IntrusionLabs) | United Kingdom, with global processing |
| ActiveCampaign, LLC (operating Postmark) Privacy policy |
Transactional email delivery | Your email address and the contents of transactional messages we send you (account confirmations, password resets, billing notifications) | United States |
3. Subprocessors under evaluation
The following provider is under active evaluation but not yet in production. We list it here for transparency. It will move to the table above before receiving any customer data.
| Provider | Intended purpose | Status |
|---|---|---|
| Vultr (The Constant Company, LLC) Privacy policy |
Additional edge sensor hosting in regions where Hetzner and Linode have limited presence | Under evaluation |
4. Change-notice commitment
We aim to publish additions or changes to the subprocessor list on this page at least 30 days before a new subprocessor begins handling customer data. We may add a subprocessor on shorter notice if required by urgent security, legal, or operational necessity; in those cases we will publish the addition as soon as practicable and note the reason.
5. How to subscribe to changes
You can monitor this page for changes by checking it periodically or by subscribing to our public changelog RSS feed (when published). Paid customers may also request email notification of subprocessor changes via legal@intrusionlabs.com.
6. Concerns about a subprocessor
If you have a concern about a specific subprocessor or want a Data Processing Agreement (DPA) that addresses our use of subprocessors, contact legal@intrusionlabs.com.