Effective Date: October 2026
A subprocessor is a third party that Asphalyn engages to process customer data on its behalf. Under GDPR Article 28 and POPIA, we must disclose these entities to you and ensure they are bound by appropriate data protection obligations.
The table below lists every subprocessor currently engaged by Asphalyn, the purpose for which it processes data, where its processing takes place, and the mechanism we rely on for international transfers.
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Vercel Inc. | Application hosting (frontend and backend) | Frankfurt, Germany (fra1 — EU Central) and global edge network | Standard Contractual Clauses |
| Aiven Ltd | PostgreSQL database hosting | Amsterdam, Netherlands (DigitalOcean ams3) | Standard Contractual Clauses |
| DigitalOcean, LLC | Infrastructure provider underlying the Aiven database service | Amsterdam, Netherlands (ams3); backup storage in Bangalore, India (blr1) | Standard Contractual Clauses |
| Backblaze, Inc. | Object storage for attachments | United States (Reston, Virginia — us-east-005) | Standard Contractual Clauses |
| Paddle.com Market Ltd | Merchant of record: payment processing, subscription management, billing | United Kingdom | UK adequacy regulations; Standard Contractual Clauses |
| Google LLC | OAuth authentication (Sign in with Google) | United States | EU-US Data Privacy Framework; Standard Contractual Clauses |
| Hostinger International Ltd. | Transactional email delivery (workspace invitations) | 61 Lordou Vironos str., 6023 Larnaca, Cyprus | EU Standard Contractual Clauses (Module Two and Module Three) |
We will notify workspace owners by email at least 30 days before adding a new subprocessor that processes personal data. During that period you may object to the change by contacting us at contact@asphalyn.com. If you object and we cannot accommodate your objection, you may terminate your subscription without penalty before the change takes effect.
If you have questions about our subprocessors or need a copy of a specific subprocessor's data processing agreement, contact us at contact@asphalyn.com.