DC ESCRYPTSub-processors
These are the third parties that process personal data on our behalf when you use Raposa Aval. The list is part of the Data Processing Agreement.
| Provider | What it does for us | Data it can see | Location |
|---|---|---|---|
| OVH | virtual server, application hosting, database storage and backups | everything stored by the service, at rest on its disks | Germany |
| Cloudflare | DNS, edge proxy for raposa.group, inbound email routing for our published addresses | request metadata (IP, user agent, URL); content of email sent to our addresses | EU edge, global network |
| Resend (delivery via Amazon SES) | outbound transactional email: approval notifications, replies to enquiries | recipient address and message content | EU (eu-west-1) |
| Meta Platforms Ireland | advertising measurement on our public pages, only after the visitor accepts the cookie banner | IP address and browsing event on our marketing pages — never approval data | Ireland / United States |
| Google Ireland (Fonts) | web fonts on public pages | IP address of the visitor's browser | Ireland / United States |
| Google Ireland (Analytics) | website analytics (Google Analytics 4) on our public pages, only after the visitor accepts the cookie banner | IP address and browsing events on our marketing pages — never approval data | Ireland / United States |
| Contabo | off-site storage of approval-database backups | only ciphertext: every copy is age-encrypted before transfer and the decryption key never resides on that host | France |
| Stripe Payments Europe | subscription billing and invoices for paid plans | customer email, plan and subscription identifiers; card data is collected on Stripe's own pages, where Stripe acts as an independent controller — never approval data | Ireland (EU) |
| Sentry (Functional Software, Inc.) | error monitoring of our public pages and of the approval service | page URL, browser and device data, IP address and technical error details — never approval context, emails or tokens | EU data region; US company |
| Telegram, Slack — only if the customer enables these approval channels | delivery of approval requests to approvers and of their button presses back to us | action and context text of the approval request, approver's chat identity | outside our EU hosting — see the providers' terms |
What is deliberately absent
No analytics vendor, CRM, session recorder or support-desk tool touches approval data — the analytics above run only on the marketing pages and only after consent. Error monitoring (Sentry) receives technical error data only. The approval database itself leaves its hosting provider in exactly one form: age-encrypted backup files stored with Contabo in France, which never sees a decryption key.
Changes
New or replaced sub-processors are announced on this page at least 30 days before they start processing. To be notified by email, write to [email protected] and ask to be added to the sub-processor notice list. Customers may object in writing before a change takes effect.