Effective: on publication
Last updated: 2026-05-18
Version: 3.0-final
Document key: sub-processors
Plain-English summary
This page lists every third party that processes personal information on GAEZLA’s behalf when you use the service. We notify customers at least 30 days before adding or replacing any sub-processor.
Current sub-processors
| Sub-processor | Entity | Country | Service | Data processed |
|---|---|---|---|---|
| Cloudflare | Cloudflare, Inc. | United States | Infrastructure (compute via Workers, object storage via R2, CDN, DDoS protection) | All Customer Data transiting or stored via the Service; visitor IP addresses on the marketing site |
| Stripe | Stripe, Inc. (with affiliated Stripe entities for international card processing as Stripe routes) | United States | Payment processing | Customer billing contact name, email, billing address; payment-card token (Stripe handles card numbers directly; GAEZLA never sees the PAN) |
GAEZLA does not currently use:
- A transactional email provider (system notifications, when sent, are not routed through a dedicated third-party email gateway).
- A third-party error-tracking or application-performance monitoring provider.
- Any third-party analytics service on the marketing site or product.
- Any third-party AI or large-language-model provider as a default integration. Bring-your-own AI providers that a Customer configures themselves are not sub-processors of GAEZLA — see Data Processing Addendum, Section 5.4.
If any of the above changes, this list will be updated at least 30 days before the new sub-processor begins processing Customer Data.
Non-US privacy regimes
GAEZLA is an American company and does not undertake compliance with non-US privacy regimes in its standard contracts. Where a Customer’s circumstances require a specific transfer mechanism (e.g. EU Standard Contractual Clauses, UK IDTA), the Customer is responsible for assessing applicability and may negotiate separate written terms with GAEZLA.
Changes to this list
We will give registered customers at least 30 days’ prior notice by email of any addition or replacement. Notices will be sent to account administrator contacts.
To object to a new sub-processor, contact legal@t1p5m4rk.com within the 30-day window. If we cannot accommodate the objection, you may terminate the relevant Order Form without penalty on 30 days’ notice, as set out in the Data Processing Addendum.