Subprocessors
Version 1 · Last updated: 2026-11-04
These are the companies that process personal data for DomainCare, operated by Artificial Systems SRL. Each has a written data processing agreement with us that gives your data the same protection as our Data Processing Agreement. This list is the one our DPA and privacy policy refer to.
Processors
| Service and company | What it does for us | Personal data | Where | Transfer basis |
|---|---|---|---|---|
| Server host (database and job runner) CONECTIX INTERNET SRL, Bucharest, Romania | Runs DomainCare's database and background job server | All account and monitoring data, sign-in sessions (IP address, browser) | Romania | None: stays in the EEA |
| Vercel Vercel Inc., United States | Hosts the website and the application, runs scheduled jobs | IP address and request data; hostnames of custom status-page domains | Frankfurt, Germany (application); a global edge network for static files | EU Standard Contractual Clauses in Vercel's DPA for any access from the United States |
| SMTP2GO Sand Dune Mail Ltd (trading as SMTP2GO), New Zealand | Sends all email: sign-in links, alerts, digests, billing and account email | Email address, name, email content | European Union | Processed in the EU; SMTP2GO is a New Zealand company, covered by the EU adequacy decision for New Zealand |
| Google Workspace Google Ireland Ltd, Ireland | Our mailboxes: support, privacy, legal and security email you send us | Your email address, name and what you write to us | European Union and United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Stripe Stripe Payments Europe Ltd, Ireland, with Stripe, Inc., United States | Payments, subscriptions, invoices, tax calculation, billing portal | Name, email, billing address, tax ID, payment method (held by Stripe) | European Union and United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| PostHog PostHog, Inc., United States | Product analytics and error tracking in your browser, only after you accept analytics cookies; account and billing statistics and error reports from our servers | In the browser, after you accept: pages and features used, device and browser data, IP address, your DomainCare user id, plan and number of domains. From our servers: organisation id, account and billing events, Stripe customer id, error reports | United States (PostHog US Cloud) | EU Standard Contractual Clauses in PostHog's DPA |
| CookieScript CookieScript, Lithuania | Shows the cookie banner and keeps a record of your choice | Your consent choice, a consent id, IP address, browser data | European Union | None: stays in the EEA |
| Upstash Upstash, Inc., United States | Rate limiting that protects sign-in and the free tools from abuse | IP address, kept only for the length of the limit window (up to one day) | United States | EU Standard Contractual Clauses in Upstash's DPA |
Services that receive domain names only
To run the checks, we send the domain names you monitor, and the server addresses they point to, to: Google PageSpeed Insights and Browserless (page-speed tests), Google Safe Browsing, Abusix, SpamRats and public DNS blocklists (reputation lookups), public DNS resolvers, and the registries' RDAP and WHOIS servers. They receive no account data. A domain name can identify a person when it is their own name; it is then the only data these services see.
Other recipients
- Google and GitHub, when you choose to sign in with them, act under their own terms and privacy policies as independent controllers.
- Your browser's push service (Google, Mozilla or Apple) carries push notifications you turn on. The alert content is encrypted end to end.
- Slack, Discord and webhook endpoints you configure receive the alerts you route to them, under your own agreements with those services.
Changes to this list
We email the owners of every DomainCare organisation at least 30 days before we add or replace a subprocessor that handles personal data, and we update this page with a new version and date. You can object by writing to legal@domaincare.io within those 30 days. If we cannot address your objection, you may end your subscription before the change takes effect and we refund the unused part of any prepaid period.
Earlier versions of this list are available on request at legal@domaincare.io.