Sub-processor List
Last updated · 22 April 2026
This document lists the sub-processors currently authorised by Dubsof Limited (“Dubsof”) to process personal data on behalf of customers in connection with Dubsof’s products and services. It is maintained in accordance with the Dubsof Privacy Policy and Applicable Data Protection Law. Dubsof will update this list and provide notice of material changes in accordance with the DPA.
Active Sub-processors
The following entities process personal data on Dubsof’s behalf (as processor or sub-processor) under documented instructions.
| Sub-processor | Purpose | Data processed | Location | Products |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting infrastructure (EU-West-1 region) | All data stored on Hosting Infrastructure (End User Data, application data, backups) | Ireland (EU) | All products (Atrium Playground) |
Independent Third-Party Controllers
The following entities process personal data as independent controllers. Dubsof shares limited personal data with these parties for the purposes described below, but they determine the purposes and means of their own processing.
| Third party | Purpose | Data shared | Location | Products |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing and billing | Payment method, billing address, VAT number, transaction records | USA / EU (SCCs in place) | All products (Atrium Playground) |
Stripe processes payment data as an independent controller under its own privacy policy and terms.
User-Directed Third-Party Recipients
The following third parties receive personal data only where the user initiates an export or account connection. These are not sub-processors: Dubsof facilitates the transfer at the user’s direction, and the recipient processes data under its own terms and privacy policy, not on Dubsof’s instructions.
| Third party | Purpose | Data transferred | Location | Products |
|---|---|---|---|---|
| Cloudflare, Inc. | Application hosting (user-initiated export) | Exported application code and any associated data | USA / EU | Atrium Beta (export feature) |
| GitHub, Inc. (Microsoft) | Code repository (user-linked account) | Exported code repositories | USA | Atrium Beta (GitHub export) |
Not Currently Engaged
The following categories of sub-processor are not currently engaged. If Dubsof engages a sub-processor in any of these categories, this list will be updated and notice will be provided in accordance with the DPA.
- Monitoring and logging provider
- Analytics provider
- Email / transactional communications provider
- Authentication provider (currently handled by Dubsof’s own infrastructure)
- CDN / edge network provider
Transfer Mechanisms
Where a sub-processor is located outside the EEA, Dubsof ensures appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- supplementary measures where required by the EDPB guidance; and
- adequacy decisions, where available.
Notification of Changes
Dubsof will provide not less than 30 days’ prior notice of any material change to this sub-processor list.
Contact
For queries about sub-processors or data processing, email legal@dubsof.com. Dubsof Limited, 55 Merrion Square South, Dublin 2, Dublin D02 YD65, Ireland. CRO 787713 — Ireland.