The third parties CertAssist uses to help deliver the service.
Last updated: 28 September 2026
CertAssist engages the sub-processors below to process personal data in connection with the Services. Each is bound by data protection terms no less protective than our Data Processing Agreement, and appropriate safeguards apply to any international transfer. We give customers reasonable prior notice of changes to this list.
| Sub-processor | Purpose | Location |
|---|---|---|
| Google LLC / Google Cloud (Firebase) | Application hosting, database, file storage and authentication | Australia (Sydney) for workspace data |
| Stripe | Subscription billing and payments | United States, Australia and other regions |
| Resend | Transactional and authentication email delivery | United States |
| Cloudflare | Cookieless, aggregate analytics on the public marketing website only (no customer workspace data) | Global |
| Hotjar | Website analytics and session replay on the public marketing website only. Not used in the CertAssist platform, so it never sees customer workspace data | European Union (Ireland) |
Questions about our sub-processors? Email privacy@certassist.io.
