THE SHORT VERSION
These are the companies that help us run Lureproof. We'll give customers 30 days' notice before adding a new one that processes customer data.
Current subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Hosting, database (D1), network security and email routing | Global / EU |
| Resend | Service email: sign-in links, notifications, reports and the newsletter | US |
| Mailgun | Sending practice (simulated phishing) emails | EU / US |
| Stripe | Payments, subscriptions and invoicing | US / EU |
| Directory sign-in and read-only sync, for customers who connect Google Workspace | Customer region / US | |
| Zoho | Directory sign-in and read-only sync, for customers who connect Zoho Workplace | Customer's Zoho data centre |
| Google Analytics | Website statistics, only for visitors who accept analytics cookies. Not used for customer or employee data. | US |
Changes and objections
We'll email customers at least 30 days before adding or replacing a subprocessor that processes customer data, and update this page. If you have reasonable data protection grounds to object, tell us at privacy@lureproof.com and we'll work with you on an alternative, or you can end the agreement. See our data processing agreement.
Transfers
Where a subprocessor processes data outside the UK or EEA, we rely on adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.