Legal
Subprocessor List
Last updated: 7 October 2026
This is the Subprocessor List referred to in Section 3 of the Data Processing Addendum.
| Sub-Processor | Parent Company | Processing Role | Processing Locations | Legal Basis for Sub-Processing |
|---|---|---|---|---|
 Google Cloud Platform | Google LLC | Cloud infrastructure: compute, storage, networking, encryption key management, AI services | Europe (Netherlands) · United States · Australia | Google Cloud DPA, incl. SCCs for non-EU/EEA processing |
 Microsoft Azure | Microsoft Corporation | Cloud infrastructure: compute, storage, networking, encryption key management | Europe (Netherlands) · United States · Australia | Microsoft Products and Services DPA, incl. SCCs for non-EU/EEA processing |
 Cloudflare | Cloudflare, Inc. | Reverse proxy, content delivery, security and DDoS protection for the platform APIs (api.licenseware.io, api.us.licenseware.io, api.au.licenseware.io) | Global edge network (the Cloudflare data centre nearest the user) | Cloudflare Data Processing Addendum, incl. SCCs for non-EU/EEA processing |
 SendGrid | Twilio Inc. | Transactional email delivery for platform account, notification and product information emails (recipient names, email addresses, email content) | Same region as the Controller's Regional Instance: Europe · United States · Australia | Twilio Data Protection Addendum, incl. SCCs for non-EU/EEA processing |
All other platform components (databases, identity layer, observability stack, task queuing) are self-hosted within Licenseware's own managed Kubernetes clusters on the infrastructure providers above and do not constitute independent sub-processors.