Legal document
Subprocessor List
Last updated: October 23, 2026
Version: 1.5
This Subprocessor List identifies third-party Subprocessors engaged by Kantoku in connection with the Services. Kantoku uses these providers to support service delivery, infrastructure, security, communications, payments, support, and related operational functions.
Personal Data may be processed in countries other than the country where the Customer, User, or individual is located, in accordance with the Agreement, DPA, Privacy Policy, and Applicable Law.
Subprocessors
| Subprocessor | Purpose | Data Categories | Region | Data protection |
|---|---|---|---|---|
| Amazon Web Services, Inc. | SQS, SES, and S3 services | Account data, service data, and email-related data | North America (Canada) | DPA |
| Backblaze, Inc. | Encrypted database backup storage | Account data and service data contained in encrypted database backups | Europe (Netherlands) / North America (Canada) | DPA |
| Cloudflare, Inc. | DNS proxy, WAF, and Zero Trust network access | IP addresses, request metadata, traffic logs, and data transiting protected applications | Global edge network; United States-based provider | DPA |
| Raintank, Inc. dba Grafana Labs (Grafana Cloud) | Infrastructure monitoring and log management | Technical logs, diagnostic data, and associated request metadata | Europe (Sweden) | DPA |
| Hetzner Online GmbH | Dedicated infrastructure hosting for website analytics services | Website usage data and associated technical metadata | Europe (Finland) | Privacy policy |
| Laravel Holdings Inc. (Laravel Nightwatch) | Application monitoring, logs, exceptions, and diagnostics | Service data, technical logs, and diagnostic data | Europe (Germany) | Privacy policy |
| MaxMind, Inc. | IP intelligence and geolocation API for login and account security | IP addresses and related lookup data | Global (U.S., EU, and APAC regions) | DPA |
| Odoo S.A. | Customer support communications | Contact data, customer communications, and personal data included in support requests and attachments | Asia (Singapore) | Privacy policy |
| OVH Hosting, Inc. | Dedicated infrastructure hosting | Account data, service data, and usage data | North America (Canada) | DPA |
| Stripe, Inc. | Payment processing | Billing data, contact data, and payment metadata | United States / Europe (Ireland) | DPA |
| Proton AG | Customer support communications | Contact data, customer communications, and personal data included in support requests and attachments | Europe (Switzerland) | DPA |
Updates
Kantoku may update this Subprocessor List from time to time. If you have questions about this list or Subprocessor changes, contact us at privacy@kantoku.io.