← Compliance Center

Data processing

Sub-processors

As of 26 September 2026

These providers may process customer data on our behalf when you use Ridian. This list forms part of our data processing agreement, which references it rather than embedding a copy. A provider can be listed before its service goes live.

Convex, Inc.444 DeHaro Street, Suite 218, San Francisco, CA 94107, USA
Purpose
Application backend, database and backups
Processing location
Ireland; support access from the United States
Cloudflare, Inc.101 Townsend Street, San Francisco, CA 94107, USA
Purpose
Website delivery, edge functions, consent and session storage
Processing location
EU jurisdiction for storage; global network
Lettermint B.V.Willemsvaart 16 B, 8019 AB Zwolle, Netherlands
Purpose
System, support and enquiry email
Processing location
Netherlands
Functional Software, Inc. (Sentry)45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA
Purpose
Error diagnostics on filtered technical metadata
Processing location
Germany; access from the United States
OpenRouter, Inc.169 Madison Avenue, New York, NY 10016, USA
Purpose
Language model requests for the in-app assistant, once activated
Processing location
EU endpoint and EU model provider; account data in the United States
Peaberry Software, Inc. (Customer.io)9450 SW Gemini Dr., Suite 43920, Beaverton, OR 97008, USA
Purpose
Onboarding and lifecycle email
Processing location
EU workspace; United States

Every provider outside the EU processes on the European Commission’s Standard Contractual Clauses, supplemented by the UK Addendum where applicable. Stored data, backups and failover for the application remain in the EU. The measures in place and the retention periods are set out in the data processing agreement.

How we announce changes and how you can object is set out in section 6 of the data processing agreement.

Not recipients Source hosting, DNS and availability monitoring receive no customer data. Services we use for our own purposes, such as website analytics, billing and our correspondence, are named in the privacy policy. Calendar, directory and mail systems you connect, and assistant clients you use, are under your control and are not our sub-processors.

Questions or objections: [email protected]

Related documents

This list forms part of the data processing agreement, which also sets out the technical measures and retention periods. The German version is at Unterauftragnehmer.