Skip to content

Subprocessors

Last updated

The companies we rely on to run the hosted openbranchhq service, what they do, and which personal data they handle on our behalf.

1. Current subprocessors

Each subprocessor is bound by a written agreement that requires it to protect personal data to the standard of our Data Processing Agreement, and to process it only to provide its service to us.

SubprocessorPurposePersonal dataLocation
RailwayApplication hosting, database and job queueAll Customer Data and account dataUnited States
CloudflareFile storage (R2) and secure access to internal toolingUploaded files: leave attachments, documents, avatars and logosUnited States
ResendTransactional email deliveryRecipient name and email address, email contentUnited States
PolarPayments, invoicing and sales tax, as merchant of recordBilling contact, organization name, payment detailsUnited States
AxiomOperational logs for reliability and securityRequest metadata such as IP address and user agent; email addresses are maskedUnited States
GoogleSign in with Google, only for users who choose itName, email address and profile pictureUnited States

2. Changes to this list

We update this page at least 30 days before a new subprocessor starts processing Customer Data, and email the owners of every organization on a paid plan. Under our Data Processing Agreement, you may object to a new subprocessor on reasonable data-protection grounds within that period.

3. Self-hosted installations

This list applies only to the hosted service at openbranchhq.com. A self-hosted installation sends no data to us or to these providers unless its operator configures them.

4. Questions

Write to [email protected] with questions about any subprocessor.