1. Purpose
This Subprocessor List identifies third parties that Paravane uses or may use to process Customer Personal Data in connection with the Services. Capitalized terms have the meanings given in the Terms of Service or Data Processing Addendum.
Paravane requires subprocessors to process personal data only for authorized purposes and to maintain appropriate confidentiality, security, and data protection commitments. Specific subprocessors may vary by product, region, feature, plan, or customer configuration.
2. Current subprocessors
| Subprocessor | Purpose | Data processed | Location | Notes |
|---|---|---|---|---|
| Hetzner Online GmbH | Cloud hosting / compute / storage / networking | Customer API Data, account data, logs, backups, technical metadata | Germany / Finland / EU or other configured region | Used for hosting and infrastructure supporting the Services. |
| Cloudflare, Inc. | DNS, CDN, WAF, DDoS protection, traffic security, edge routing, Turnstile | IP addresses, request metadata, headers, logs, security events, website/dashboard traffic | United States / global edge network | Used for website/API traffic protection, routing, and bot/security checks. |
| Stripe, Inc. | Payment processing, subscription billing, invoices, taxes, payment status, customer portal | Billing contacts, payment metadata, invoices, tax information, transaction data, limited payment identifiers | United States / global | Used when checkout, subscription billing, invoices, payment-status flows, or customer portal flows are enabled. |
| Postmark / ActiveCampaign, LLC | Account emails, email verification, password resets, contact-form notifications, security notices, receipts, product notices | Email address, name, account/workspace details, message metadata, message content | United States / global, subject to provider configuration and transfer terms | Used for transactional email and contact/signup notification flows. |
Paravane does not currently use dedicated third-party analytics cookies, advertising analytics, support chat widgets, or external model-inference providers for Customer API Data by default. If Paravane later adds a material subprocessor for those functions, this page will be updated.
3. Subprocessor change notices
Paravane will provide notice of material new subprocessors by updating this page or by another notice mechanism described in the DPA. Customers may object to a new subprocessor on reasonable data protection grounds within the objection period stated in the DPA or applicable customer agreement.
If a customer objects, Paravane will use commercially reasonable efforts to address the objection, which may include providing additional information, offering a configuration that avoids the subprocessor where feasible, or permitting termination of the affected Services as described in the DPA.
4. Vendor review criteria
Paravane reviews subprocessors based on factors appropriate to the service, data, and risk, which may include:
- Security controls and confidentiality commitments.
- Data protection agreement availability and scope.
- Data location and cross-border transfer mechanism.
- Need-to-know processing and least-privilege access.
- Retention, deletion, and backup practices.
- Incident notification commitments.
- Product necessity, availability, reliability, and support.
- Certifications, audit reports, or security documentation where available.
5. Customer-selected integrations
Customer-selected integrations, webhooks, destinations, repositories, CRMs, messaging tools, storage buckets, or other third-party systems connected by Customer are not Paravane subprocessors unless Paravane separately engages them to process Customer Personal Data on Paravane's behalf. Customer is responsible for reviewing and contracting with customer-selected integrations.
6. Contact
Questions about subprocessors or privacy may be sent to privacy@paravane.io. Security questions may be sent to security@paravane.io. General information requests may be sent to contact@paravane.io. Mailing address: 11166 Fairfax Blvd Suite 500 #1378, Fairfax, VA 22030, United States; Phone: (703) 972-1286.