1. Current subprocessors
- Cloud infrastructure and database hosting — application hosting, primary database, file storage and backups. Regions: Australia and the European Union.
- Stripe Payments Australia Pty Ltd and Stripe, Inc. — payment processing, card tokenisation, subscription billing, tax calculation, fraud detection. PCI DSS Level 1 service provider. Processes data globally, including in the United States, under Standard Contractual Clauses where applicable.
- Transactional email delivery provider — sending invitations, password resets, billing receipts and security notices.
- Google — sign-in only, where a User elects to sign in with a Google identity. No directory or contact data is shared with Google beyond authentication.
- Microsoft — sign-in (optional), and, where a Workspace admin connects Microsoft 365 / Entra ID, directory sync (name, email, job title, department) and signature push to Microsoft 365 mailboxes on the admin's instruction. This directory-sync and push capability is rolling out gradually and may not yet be available to every workspace.
- Canva — where a User connects their Canva account, to browse and import designs and brand templates into a signature. We store the connected account's encrypted email and display name.
- Zoho Corporation — where a Workspace admin connects Zoho Mail, to sync the tenant's Zoho user directory (name, email) and push rendered signature HTML to those Zoho Mail accounts on the admin's instruction.
- Error monitoring and product analytics — to detect, diagnose and improve the Service; data is pseudonymised where practical.
2. Integration-specific subprocessors
Canva, Zoho, and Microsoft directory sync only process data for Workspaces that have actively connected that integration. If your Workspace hasn't connected an integration, that subprocessor does not receive your data.
3. Notice of changes
We will give reasonable prior notice of any new subprocessor that will process Customer personal data, by email to Workspace admins and/or in-product notice, consistent with our Privacy Policy. If you have concerns about a new subprocessor, contact privacy@emailart.io and we will work with you to address them.
4. Questions
For the most current list or any questions about a specific subprocessor, email privacy@emailart.io.