Legal
Sub-processors
Last updated May 17, 2026. We use the following vendors to deliver Root Herald. We notify customers 30 days before adding any new sub-processor — subscribe to /legal/sub-processors.rss to get the firehose.
Current list
Active sub-processors
| Vendor | Purpose | Location | Transfer |
|---|---|---|---|
| Amazon Web Services (AWS) ↗ | Compute, storage, database, networking | United States (us-west-2 / Oregon) | Standard Contractual Clauses |
| Stripe ↗ | Payment processing for paid plans | United States / Ireland | Standard Contractual Clauses |
| Postmark (ActiveCampaign) ↗ | Transactional email (signup verification, support replies) | United States | Standard Contractual Clauses |
| Sentry ↗ | Error tracking and performance monitoring (no PII in payloads) | United States | Standard Contractual Clauses |
| Cloudflare ↗ | DDoS protection and edge caching | Global (edge POPs) | Standard Contractual Clauses |
Object
If you don't like one
Email dpa@rootherald.io with the sub-processor name and your concern. If we can't agree on a remedy you may terminate the affected service with a pro-rata refund.