Snapshot 51380
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Legal > Subprocessors List Raklet – Subprocessors List Last Updated: September 3, 2026 Raklet, Inc. (“Raklet”) engages certain third-party service providers (“Subprocessors”) to support the delivery of our SaaS platform and mobile applications. These Subprocessors may process limited Customer Personal Data as necessary to provide infrastructure, analytics, communications, or support services. Raklet remains fully responsible for the performance of its Subprocessors. 1. Infrastructure and Hosting Subprocessors Subprocessor Purpose Location(s) of Processing Transfer Mechanism Microsoft Azure Primary hosting for web applications, services, and databases EU (Netherlands or other EU region used by Raklet) SCCs + UK Addendum Elastic Cloud (Elastic.co) Managed Elasticsearch cluster (search/indexing) EU SCCs + UK Addendum Cloudflare, Inc. CDN, caching, DNS, WAF, DDoS protection Global SCCs + UK Addendum Amazon Web Services (AWS) Email sending (SES), static asset hosting EU/US SCCs + UK Addendum 2. Monitoring, Telemetry and Error Tracking Subprocessor Purpose Locations Transfer Mechanism Azure Application Insights Telemetry, performance monitoring, diagnostics EU/US (Microsoft regions selected by Raklet) SCCs + UK Addendum Rollbar, Inc. Error tracking and diagnostics US SCCs + UK Addendum 3. Analytics Subprocessor Purpose Locations Transfer Mechanism Mixpanel, Inc. Product analytics to improve functionality and user experience EU/US SCCs + UK Addendum Google Analytics (Google LLC) Website analytics EU/US SCCs + UK Addendum 4. Mobile Application Distribution These providers are required for distributing the Raklet mobile apps. They typically process only device metadata, crash logs, and anonymised diagnostic information. Provider Purpose Locations Transfer Mechanism Google Play (Google LLC) App distribution, crash reporting (ANR), device metadata EU/US SCCs + UK Addendum Apple App Store / App Store Connect (Apple Inc.) App distribution, crash analytics (if enabled by the user), device metadata EU/US Apple transfer mechanisms 5. Google Cloud Platform (GCP) Raklet uses specific Google Cloud APIs for security, geolocation, and push notification services. Subprocessor Purpose Locations Transfer Mechanism Google Cloud Platform (GCP) reCAPTCHA (bot protection), Maps API (geolocation), Firebase Cloud Messaging (push notifications), other supporting APIs EU/US SCCs + UK Addendum Note: reCAPTCHA may process IP addresses and device information for abuse detection. 6. Email, Messaging and Notifications Subprocessor Purpose Locations Transfer Mechanism Amazon Web Services – SES Transactional email delivery EU/US SCCs + UK Addendum Twilio Inc. (if enabled by Customer) SMS sending Global SCCs + UK Addendum 7. CRM, Support and Internal Tools Subprocessor Purpose Locations Transfer Mechanism HubSpot, Inc. CRM and marketing automation EU/US SCCs + UK Addendum Google Workspace (Google LLC) Internal email, storage, and productivity tools EU/US SCCs + UK Addendum Intercom (if used) Support chat and helpdesk services EU/US SCCs + UK Addendum 8. Payments and Financial Services Subprocessor Purpose Locations Transfer Mechanism Stripe, Inc. Payment processing EU/US SCCs + UK Addendum Raklet does not store or process full payment card numbers. 9. Customer-Enabled Integrations (Not Subprocessors) The Raklet platform allows Customers to connect third-party services at their discretion. These integrations are optional, Customer-controlled, and not considered Raklet subprocessors under GDPR because Raklet does not determine the purpose or means of processing. When enabled, these services act as independent controllers or processors on behalf of the Customer. Examples of Customer-enabled integrations include: Analytics and reporting Google Analytics Double the Donation Communications and events Zoom Authentication and SSO Discourse SSO Auth0 CRM and marketing HubSpot Simplelists Finance and accounting QuickBooks Media and video Vimeo Data exchanged with these integrations is entirely under Customer control. Raklet does not send data to these services unless the Customer explicitly activates and configures the integration. 10. Subprocessor Changes We will notify clients at least 30 days in advance of any planned additions or replacements. Clients may raise objections based on reasonable data protection grounds. 11. Data Security and Compliance All subprocessors are under strict confidentiality and data protection obligations. Data is processed only as necessary to deliver Raklet’s services. Security measures comply with GDPR and DORA regulations. Contact For questions about this Subprocessors list, please contact: [email protected] Raklet, Inc. 4347 20th St San Francisco, CA United States