Legal
Sub-processors
Last updated: 2 October 2026
Overview
OATHERA engages a small number of trusted third parties ("sub-processors") to help deliver, secure, and operate the Services. Each is bound by a data-processing agreement with obligations no less protective than those in our Data Processing Agreement, and OATHERA remains responsible for their performance. We update this page before adding a new sub-processor so customers can review changes.
Current sub-processors
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Cloudflare, Inc. | Edge hosting, CDN, DNS, and DDoS protection for the website and Services | Global (edge) |
| Cloud infrastructure provider | Compute, storage, and managed databases for the Services | Customer-selected region |
| Email delivery provider | Transactional and account email | EU / US |
| Analytics provider | Aggregate, privacy-respecting website usage analytics (with consent) | EU / US |
| Customer support tooling | Handling and tracking support requests | EU / US |
Where a specific vendor is listed generically above, the named entity is provided to customers under NDA on request while this page is finalised.
Change notifications
To be notified of changes to this list, email privacy@oathera.ai and ask to join the sub-processor update list. Customers may object to a new sub-processor on reasonable data-protection grounds as described in the DPA.