Subprocessor Registry
In accordance with GDPR Article 28 and Bangladesh PDPO, we maintain a public list of all subprocessors who process personal data on our behalf.
| Subprocessor | Purpose | Location | DPA |
|---|---|---|---|
| Amazon Web Services | Cloud hosting infrastructure | Singapore | — |
| Cloudflare | CDN and WAF protection | USA | — |
| Google reCAPTCHA | Bot detection on forms | USA | — |
Changes to Subprocessors
We will notify users via email at least 30 days before adding or replacing a subprocessor. Users have the right to object to a new subprocessor per GDPR Article 28(2).