Legal · last updated 13 July 2026
Sub-processors
To provide the Service, Postbox, Inc. uses the third-party providers below to process data on your behalf. We require each of them to handle data under appropriate data-protection terms. This list is incorporated into our Data Processing Agreement.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Outbound email delivery (SES) and bounce/complaint event processing (SNS, SQS) | Message content, sender and recipient addresses, delivery metadata | United States, EU (eu-central-1) |
| Cloudflare, Inc. | Object storage for stored mail (R2), DNS, and edge/CDN | Stored message content and attachments, request metadata | United States, Global edge |
| Neon, Inc. | Managed PostgreSQL database | Account, organization, project, and message metadata | United States or EU (per project region) |
| Redis Ltd. (Redis Cloud) | Queues, cache, and event streams | Transient operational and job data | United States or EU |
| Stripe, Inc. | Payment processing and subscription billing | Billing contact and payment metadata (card data held by Stripe) | United States |
| UpCloud Ltd | Application compute for the Postbox platform | All categories, transiently, while requests are processed | Germany (Frankfurt), EU |
Changes to this list
We may add or replace sub-processors as the Service evolves. When we do, we will update this page with a new "last updated" date. Customers with an active agreement may subscribe to change notifications and, where our Data Processing Agreement provides, object to a new sub-processor on reasonable data-protection grounds.
Contact
Questions about our sub-processors: [email protected].