Sub-processors

We keep this list short on purpose — every addition is another party with access to customer data and another contract to police.

• Cloud hosting — runs the application and databases. Processes all Customer Data. TODO: confirm provider and hosting region before publishing.
• Image delivery network (Cloudinary) — stores and serves images such as company logos and profile photos. Processes images only.
• Document storage (Google Drive) — stores customer documents and generated files. Processes uploaded documents.
• Transactional email delivery — sends notifications, invitations and password resets. Processes recipient name and email address, and the content of those messages.
• Error monitoring — records diagnostic information about failures. Configured to redact personal data from reports.

TODO: replace each entry above with the named legal entity, the country it processes in, and the date it was added, before this page is published.

We give at least 30 days' notice before adding or replacing a sub-processor. Account administrators are notified by email, and this page is updated.

To be added to the notification list, write to privacy@chefotech.com.