Sub-processor List

Effective date: June 2, 2026 · Last updated: June 26, 2026

Draft, pending legal review. This document is provided for transparency and is not yet a binding agreement. Bracketed items are placeholders to be finalized with counsel. For a countersigned copy, contact legal@warplink.app.

WarpLink engages the third-party sub-processors below to help deliver its service. The list separates sub-processors that may process end-user data WarpLink handles on behalf of its business customers from those that process only WarpLink's own controller data, such as account-holder, billing, authentication, or marketing-site data.

All sub-processors are located outside the EEA and the United Kingdom (in Canada and the United States). International transfers are governed by the mechanisms described in our Data Processing Agreement (the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, with supplementary measures).

To receive notice of additions or replacements, or to object on data-protection grounds, contact legal@warplink.app. We provide at least 30 days' advance notice before a new sub-processor begins processing end-user data.

Sub-processors that may process end-user data

EntityLocationPurpose
Cloudflare, Inc.United StatesEdge compute, CDN, key-value cache, and message queues for the redirect and click pipeline
Neon, Inc.United StatesManaged PostgreSQL database (primary data store)
Upstash, Inc.United StatesRedis, used for API rate limiting (processes IP addresses transiently)
Functional Software, Inc. (d/b/a Sentry)United StatesError monitoring and application observability, configured to minimize personal data

Sub-processors that process only WarpLink controller data

EntityLocationPurpose
Stripe, Inc.United StatesPayment processing and subscription billing
Resend (Plus Five Five, Inc.)United StatesTransactional email delivery
Google LLCUnited StatesAnalytics on the WarpLink marketing site and dashboard
Formspree, Inc.United StatesContact-form submission handling on the marketing site
GitHub, Inc.United StatesOAuth sign-in identity provider (account-holder authentication)
Google LLCUnited StatesOAuth sign-in identity provider (account-holder authentication)

Certain entity names are pending confirmation by counsel and may change. This list is effective as of June 2, 2026 and is updated when sub-processors are added, removed, or changed.