Strelux Corp. ("Strelux") uses the third-party sub-processors listed below to deliver the Service. This page is maintained in accordance with our Data Processing Agreement and supports our obligations under the GDPR and UK GDPR.
How to receive notifications
Customers who have executed a DPA with Strelux may subscribe to sub-processor change notifications by emailing privacy@strelux.com with the subject line "Sub-processor notifications". We will notify subscribers at least thirty (30) days before engaging a new sub-processor or materially changing the scope of an existing sub-processor's processing.
If you object to a new sub-processor, you may raise an objection within the thirty-day notice period in accordance with the process described in the DPA.
Current sub-processors
Infrastructure and hosting
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud infrastructure, compute, storage, database hosting | United States, EU (configurable per customer region preference) |
| Cloudflare, Inc. | CDN, DDoS protection, DNS, edge caching | Global (edge network) |
Application services
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Postmark (Wildbit, LLC) | Transactional email delivery (account notifications, alerts) | United States |
| Sentry (Functional Software, Inc.) | Application error monitoring and diagnostics | European Union |
| Plausible Analytics (Plausible Insights OÜ) | Privacy-respecting product analytics (aggregated usage metrics) | European Union (Estonia) |
Billing and payments
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Stripe, Inc. | Payment processing, subscription management, invoicing | United States |
Customer support
Customer support is handled via email through our Google Workspace tenant, included under the Google Cloud Platform sub-processor entry above.
Sub-processors used only for Enterprise-tier customers
These sub-processors are engaged only when the customer has contracted for the Enterprise tier and requested the corresponding feature.
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Google Cloud KMS | Customer-managed encryption keys (CMEK) | Customer-selected GCP region |
Data sources (not sub-processors)
The following are public data sources that Strelux ingests to provide the Service. These organizations do not process Customer Data on our behalf and are not sub-processors:
- U.S. Office of Foreign Assets Control (OFAC): SDN List, Consolidated Sanctions List
- European Commission: EU Consolidated List of Sanctions
- United Nations Security Council: UN Consolidated List
- UK Office of Financial Sanctions Implementation (OFSI): UK Sanctions List
- Swiss State Secretariat for Economic Affairs (SECO): Swiss Sanctions List
- International Maritime Organization (IMO): IMO Ship Identification Number Scheme
Changes
A record of changes to this sub-processor list:
| Date | Change |
|---|---|
| [DATE] | Initial publication |
Contact
Questions about our sub-processors? Email privacy@strelux.com.