MessageWarden — Sub-processor list
This list is Annex III of the MessageWarden Data Processing Agreement (DPA).
Customers receive 14 days' notice before changes (DPA §6.2).
Last updated: [EFFECTIVE DATE].
The DPA itself is a countersigned per-customer document and is not published
here; a copy is available on request at [CONTACT EMAIL].
| Sub-processor | Entity | Role | Data location | Transfer mechanism |
|---|---|---|---|---|
| Hetzner | Hetzner Online GmbH, Gunzenhausen, Germany | Compute (application and database hosting) and object storage (raw report archive, encrypted database backups) | Germany / Finland (EU) | None needed — EU entity, EU processing |
| Amazon Web Services (SES) | Amazon Web Services EMEA SARL, Luxembourg | Delivery of MessageWarden's own transactional email (sign-in links, alerts, report delivery) | eu-central-1 (Frankfurt, Germany) | EU entity and region; for any intra-group third-country access: EU–US Data Privacy Framework + SCCs (AWS Data Processing Addendum) |
| Sentry | Functional Software, Inc. (d/b/a Sentry), San Francisco, USA | Application error monitoring (EU data-residency organisation) | EU region (Frankfurt) | EU–US Data Privacy Framework certified; SCCs in Sentry DPA |
| Stripe | Stripe Payments Europe, Ltd., Dublin, Ireland | Payment processing, subscription billing, tax calculation, invoicing | EU; group processing may involve Stripe, Inc. (USA) | EU–US Data Privacy Framework + SCCs (Stripe DPA) |
Notes for legal review:
- Stripe's role. Stripe processes account/billing data (which is under the Privacy Policy, MessageWarden as controller) rather than Customer Personal Data under the DPA — and Stripe acts as an independent controller for parts of payment processing (fraud, compliance). Counsel to confirm whether Stripe belongs on this list or only in the Privacy Policy's recipients section. Listing it is the transparent default; MSP customers expect to see it.
- Sentry scope. Error events are scrubbed of request bodies by default; they may still contain identifiers (e.g. an IP or domain in an error message). If counsel prefers, self-hosted GlitchTip removes this row entirely — decision taken for launch: Sentry SaaS with EU data residency.
- No other third party receives personal data. DNS lookups performed by the Service query public DNS infrastructure and send no personal data beyond the queried domain name.