Subprocessors

01What a subprocessor is

A subprocessor is a third party that processes customer data on our behalf in order for us to provide PixyScan. Each is bound by contract to process data only on our instructions and to security terms no less protective than our own.

We publish changes here before a new subprocessor begins processing customer data. Under the Data Processing Addendum you may object on reasonable data protection grounds.

02Infrastructure

Amazon Web Services provides the compute and object storage the application runs on, including the storage of generated reports and exports. Customer data is hosted in the European Union (Frankfurt, Germany).

03Email delivery

Transactional email - signup codes, password resets, workspace invitations and billing notices - is delivered by {EMAIL_PROVIDER}. It receives the recipient's email address and the contents of the message. No scan data is sent by email.

04Payments

Subscription payments are processed by {PAYMENT_GATEWAY}. Card details are entered on their systems and are never received or stored by us; we hold only the subscription status, the plan, and the invoice records we are required to keep.

05Values still to be confirmed

Two entries above are shown as placeholders. Both are configured per deployment rather than named in the source, and publishing a plausible guess for a subprocessor would be worse than admitting the gap - a customer's data protection officer is entitled to rely on this page.

If you need the current values before this page is finalised, email [email protected] and we will confirm them in writing.

06What we do not use

We use no third-party advertising networks, no cross-site tracking providers, and no data brokers. We do not sell or share customer data with anyone for their own purposes.