DC ESCRYPTSub-processors
These are the third parties that process personal data on our behalf when you use Raposa Aval. The list is part of the Data Processing Agreement.
| Provider | What it does for us | Data it can see | Location |
|---|---|---|---|
| OVH | virtual server, application hosting, database storage and backups | everything stored by the service, at rest on its disks | Germany |
| Cloudflare | DNS, edge proxy for raposa.group, inbound email routing for our published addresses | request metadata (IP, user agent, URL); content of email sent to our addresses | EU edge, global network |
| Resend (delivery via Amazon SES) | outbound transactional email: approval notifications, replies to enquiries | recipient address and message content | EU (eu-west-1) |
| Meta Platforms Ireland | advertising measurement on our public pages, only after the visitor accepts the cookie banner | IP address and browsing event on our marketing pages — never approval data | Ireland / United States |
| Google Ireland (Fonts) | web fonts on public pages | IP address of the visitor's browser | Ireland / United States |
What is deliberately absent
No analytics vendor, CRM, session recorder or support-desk tool touches approval data. The approval database is not replicated to any third party; the only copies are the backups on the same provider that hosts it.
Changes
New or replaced sub-processors are announced on this page at least 30 days before they start processing. To be notified by email, write to contact@raposa.group and ask to be added to the sub-processor notice list. Customers may object in writing before a change takes effect.