# Subprocessors

Source: https://resilis.io/legal/subprocessors/

Effective date: 2026-10-03

Resilis uses providers for defined service functions. The list below distinguishes their roles; a provider is not necessarily a processor of every customer application or dataset. The applicable DPA or order determines each processing relationship.

## Cloudflare

Provides public website hosting and delivery through Cloudflare Pages, DNS, edge security, and Web Analytics. It can receive request metadata such as IP addresses, URLs, and browser headers for those services. Public website delivery does not by itself give this provider every customer application dataset.

## Google Analytics

Measures public page visits and fixed sign-up and conversion events when a visitor allows analytics. Google receives a browser ID, sanitized public page paths, event details, and connection information such as IP address and browser details. Resilis does not send names, email addresses, application names, or private URL details in these events.

## Resend

Delivers account email, including verification, password-reset, and invitation messages. Relevant recipient addresses and message content are processed for delivery.

## Stripe

Processes payments and related billing data. Its processing role depends on the payment service and applicable agreement; Stripe is not classified as a subprocessor for every Resilis service.

## Customer-selected services and infrastructure

External databases, storage buckets, connected compute, source repositories, and AI agents selected by a customer operate under their own service terms and privacy notices. Their locations and access depend on the customer’s configuration. Contact support@resilis.io for the infrastructure and processing information that applies to a particular Resilis-managed service or order.

## Changes and objections

Subprocessor notice periods, objection rights, and replacement options follow the applicable DPA or order. Contact support@resilis.io for service-specific data types, locations, transfer safeguards, and provider changes.