Subprocessors
Last updated: July 16, 2026
To run Seshat we use a small set of vetted service providers ("subprocessors") that may process limited data on our behalf. Each is bound by a written contract requiring confidentiality, appropriate security, and use of data only on our instructions, consistent with our Data Processing Addendum and Privacy Policy.
Current subprocessors
| Provider | Service | Data processed | Region |
|---|---|---|---|
| Cloudflare | Encrypted object storage (R2), access gateway, CDN/DNS | Vaulted email & attachments (encrypted), access logs | USA (R2: Western North America); CDN global |
| Hostinger | Application hosting & database | Account, metadata, audit logs | USA |
| PayPal | Subscription billing & payment-method vaulting | Billing details (card/PayPal data held by PayPal, not us) | USA / global |
| Resend | Account & system emails | Name, email address | USA |
Email providers you connect
When you connect a mailbox (e.g., Microsoft 365, Gmail, Yahoo, or an IMAP host), that provider isn't our subprocessor — it's your own provider, which you authorize Seshat to access on your behalf. Its handling of your mail is governed by your agreement with them.
Notice of changes
Before adding or replacing a subprocessor that processes Customer Data, we'll update this page and give at least 30 days' advance notice to business customers with a DPA in place and to anyone subscribed to subprocessor notifications. If you have a reasonable data-protection objection, raise it with us at [email protected]; if we can't resolve it, you may terminate the affected service and receive a pro-rata refund of prepaid, unused fees.