Subprocessor List
Status: Draft — DPAs in progress.
Last updated: 2026-05-13
Yoshuko uses the following third-party service providers (“subprocessors”) to operate the platform. We maintain Data Processing Agreements (DPAs) with each active subprocessor that handles personal data.
Active Subprocessors
| Subprocessor | Purpose | Data transferred | DPA status |
|---|---|---|---|
| Stripe, Inc. | Payment processing, Stripe Connect KYC, Stripe Tax, Stripe Billing | Billing data, identity data, transaction records | Stripe standard DPA (stripe.com/legal/dpa) |
| Postmark (ActiveCampaign) | Transactional email delivery | Email address, email body content | Pending — to be executed pre-launch |
| Sentry | Error tracking and performance monitoring | Error context, stack traces, anonymised user IDs | Pending — to be executed pre-launch |
| Cloudflare, Inc. | CDN, WAF, DDoS protection, DNS, Bot Management | IP addresses, request metadata, User-Agent | Cloudflare standard DPA (cloudflare.com/cloudflare-customer-dpa/) |
| Better Stack, Inc. | Uptime monitoring, on-call alerting, log shipping | Log data, uptime probe data, on-call contact info | Pending — to be executed pre-launch |
Planned Subprocessors (not yet active)
| Subprocessor | Phase | Purpose |
|---|---|---|
| Ceph cluster (self-hosted) | Phase 1 | Object storage (media, uploads) — internal; not a third-party subprocessor |
| Meilisearch (self-hosted) | Phase 2 | Full-text search — self-hosted; not a subprocessor |
To exercise your data rights or for subprocessor enquiries: privacy@yoshuko.com