Last Update: September 3, 2025
Subprocessors
| Subprocessors | Purpose | Data Processed | Location |
|---|---|---|---|
| OVH US LLC (OVHCloud) Privacy & Security | Infrastructure provider providing hosting services and storage. | Host and store various types of Customer data and Customer’s users’ data. | CA, EU |
| Hetzner Online GmbH Privacy & Security | Infrastructure provider providing hosting services and storage. | Host and store various types of Customer data, including names, email addresses, data logs. | EU, US |
| 20i Limited Privacy & Security | Infrastructure provider providing hosting services and storage. | Host and store various types of Customer data, including names, email addresses, data logs. | UK, US |
Third-party Processors and Controllers
| Subprocessors | Purpose | Data Processed | Location |
|---|---|---|---|
| PayPro, Inc. Privacy & Security | Payment processing. Used as a billing and subscription management system. | Order details, emails, billing address, payment information, transactions. | CA |
| Stripe, Inc Privacy & Security | Payment processing. Used as a billing and subscription management system. | Order details, emails, billing address, payment information, transactions. | US | Twilio, Inc. Privacy & Security | Voice and text messaging and other communication services. | Customer phone numbers. | US |
| Titan Solution Ltd SEZCPrivacy & Security | Email delivery & communication. | User contact information (including email address) used for communication and response to support requests. If you include other personal data in your support emails (e.g., snippets of database logs, query outputs, etc.), this information would also be processed by Titan. | KY |
| Hostinger International LtdPrivacy & Security | Email delivery & communication. | User contact information (including email address) used for communication and response to support requests. If you include other personal data in your support emails (e.g., snippets of database logs, query outputs, etc.), this information would also be processed by Hostinger. | EU |
| UAB Interneto VizijaPrivacy & Security | Email & newsletter services provider. | Name and email address. | EU |
| Dropbox, Inc. (Dropbox Sign) Privacy & Security | Digital signature. | Corporate and contact information, including names and email addresses. | US |
| Google Tag Manager Privacy & Security | Website audience analysis. | Analytics, device and browser metadata, IP addresses, cookies/IDs, and usage data. | US, EU |
| Google reCAPTCHA Privacy & Security | CAPTCHA security provider. | Device and browser metadata, IP addresses, cookies/IDs, and on-page interaction patterns. | US, EU |
| AC PM LLC (Postmark) Privacy & Security | Transactional email services. | Email addresses and names. | US |
| Zoom Video Communications, Inc.Privacy & Security | Virtual meetings and communications. | Corporate and contact information, including names and email addresses. | US |
| Cloudflare, Inc. Privacy & Security | DDOS protection, firewall, DNS, TLS, rate-Limiting, CDN and network load balancer. | Distributed caching for static resources and images on www.espocrm.com and forum.espocrm.com. | EU, US Customer traffic is processed globally at the data center closest to the end user. |