Our sub-processors
Who we trust to help run Privaproof, and where they process data. This is general information about our providers, not legal advice. Privaproof provides tools and general information and is not a law practice.
Last updated: 6 July 2026 · The current list always lives at privaproof.com.au/sub-processors.
We use a small number of trusted third-party providers ("sub-processors") to operate the site and deliver our service. We remain accountable for how they handle your personal information, and we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles, including through data-processing agreements (APP 8).
| Provider | What they do for us | Personal information they handle | Where they process it |
|---|---|---|---|
| Cloudflare | Website hosting, security/CDN, the self-audit, our database and file storage | Website/technical data; and (only if you submit the audit) your email and score | United States (global network) |
| Stripe | Payments and subscription billing | Name, email, billing details, payment tokens (we never see your full card number) | United States |
| Ghost | Membership, login and account management | Name, email, login details, subscription status | Netherlands (EU) |
| EmailOctopus | Marketing and list emails (where you've opted in) | Name, email address | Ireland (EU); company based in the United Kingdom |
| Proton Mail | Our business email | Any personal information in emails to or from us | Switzerland |
*Our membership provider (Ghost) delivers email through a specialist email service (Mailgun); its processing region may be the EU or the United States.
Changes. We may add or change providers as our service evolves. When we make a material change to this list, we'll update this page.
Questions? Email us at privacy@privaproof.com.au.
General information about our providers, not legal advice.