SupporterBase uses a small number of third-party service providers (sub-processors) to deliver the platform: cloud hosting, message delivery, file storage, monitoring and similar infrastructure. Each one processes customer data only to the extent needed to provide its service under a written data processing agreement, and none of them may use customer data for any other purpose, including training machine learning or AI models.
Where a sub-processor is located outside Australia, or outside the European Union for our European customers, the engagement occurs on the basis of that provider's contractual commitments and recognised transfer mechanisms (such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework), consistent with Australian Privacy Principles and the GDPR.
Application and database hosting for each customer is provided in a single region. Our standard hosting is in the European Union but other data residency options are available where required, with the hosting provider and region agreed at contract.
This list is updated when adding or replacing a sub-processor that handles customer data. Questions about this list can be sent to [email protected].
Last updated: 30 August 2026. The list below sets out every sub-processor, the service it provides, the data it handles and where it processes that data.
- Hetzner: cloud computing services (including app, web and database hosting, as well as backup storage).
- Hatchbox: server provisioning and deployment management; holds SSH access and deployment credentials and runs the database backup process.
- Amazon Web Services (S3): storage of uploaded files and images.
- Twilio (including SendGrid): SMS, voice calling and transactional email delivery for SupporterBase communications features.
- Google Maps Platform: geocoding of supporter addresses and address autocomplete.
- AppSignal: application performance monitoring, error tracking and logging.
- CSVBox: processing of CSV files during bulk import.
- Stripe: billing for the SupporterBase subscription (customer billing only - no supporter data).
- DigitalOcean: analytics platform host, with a read-only reporting connection.