Trust
Sub-processors
Everyone who processes data on our behalf. We give notice before adding one, and your data processing agreement sets the notice period and your right to object.
| Company | What they do | What they receive | Where |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, storage, form intake, and transactional email. | Website content, form submissions, operational logs. | United States |
| Cloudflare, Inc. | DNS, content delivery, TLS termination, and filtering of malicious traffic. | Request metadata in transit. No form content is stored here. | United States |
| GitHub, Inc. | Version control for site content and configuration, and change review. | Site content and configuration. No visitor personal data. | United States |
For your contract with us
These two handle the agreement between you and Steadwatch. They never receive data from your site or its visitors.
| Company | What they do | What they receive | Where |
|---|---|---|---|
| Zapier, Inc. | Passes a contract request from our console to DocuSign. | The client's business name and address, and the signer's name, email, phone and title. | United States |
| Docusign, Inc. | Sends the service agreement for electronic signature and keeps the signed copy. | The same details, and the signed agreement. | United States |
A client site may add its own processors, such as a CRM or an analytics provider. Those appear in that client’s own privacy documents and cookie table, built from the same declaration that permits the browser to contact them at all.