Sub-processors
Who touches your data, and where they are.
Complete, dated list of every sub-processor that touches Keystone customer data. Material changes are emailed to tenant administrators 30 days before they take effect, in line with Art. 28(2) GDPR.
Infrastructure
AWS Ireland · MongoDB Atlas EU.
Amazon Web Services EMEA SARL (Luxembourg HQ; EU operations in AWS Ireland eu-west-1, Dublin) — application servers, S3, KMS. MongoDB Inc. via MongoDB Atlas — managed database hosting in the eu-west-1 region. Intra-EU processing. SCCs in place for any onward transfer outside the EEA.
Transactional email
CloudVoro SMTP relay (mail.cloudvoro.com).
Ireland-hosted, controlled directly by CloudVoro. Outbound password resets, contact-form replies and audit-event notifications.
Payments
Stripe Payments Europe Ltd (Dublin).
Engaged only when a customer pays by card. Card data is handled directly by Stripe (PCI DSS Level 1); CloudVoro stores only Stripe customer IDs, invoice IDs and payment metadata.
Scheduling
Calendly LLC (USA, SCCs).
Engaged only when a visitor chooses to book a discovery call. EU Standard Contractual Clauses (Module 2). No special-category data submitted.
Analytics
Google Analytics — opt-in only.
NOT loaded by default. Engaged only after explicit cookie consent. IP anonymisation enabled. EU SCCs in place.
Notification of changes
30-day prior notice. Right to object.
CloudVoro will notify the primary tenant contact at least 30 days before adding, removing or replacing a sub-processor. Customers may object on reasonable grounds; if no commercial resolution is possible, the customer may terminate the affected service with pro-rata refund.