Subprocessors

Lancaster Solutions LLC operates Asuruas and is the contracting service provider. Contact: clancaster@lancastersolutionsllc.com.

• Purpose: production compute, network infrastructure, encrypted storage, snapshots, and backup hosting.
• Data: account, website, audit, operational, security, and encrypted backup data.
• Primary location: United States, subject to the configured AWS region and AWS support and subprocessor operations.

• Purpose: transactional email delivery, delivery events, bounces, complaints, and suppression processing.
• Data: recipient address, sender, message content, message identifiers, IP and delivery metadata, and suppression state.
• Location: United States and provider-contracted service locations.

• Purpose: hosted checkout, subscriptions, invoices, payment status, fraud prevention, tax configuration, and billing portal.
• Data: customer, organization, billing, transaction, device, and subscription identifiers. Payment-card data is entered directly with Stripe.
• Location: United States and provider-contracted service locations.

• Purpose: Turnstile abuse prevention and, when configured, DNS, TLS, reverse proxy, traffic security, and edge delivery.
• Data: IP address, request headers, browser and device signals, security events, and proxied traffic metadata or content when proxy services are enabled.
• Location: Cloudflare's global network and contracted service locations.

• Purpose: optional first-party site analytics and controlled tag delivery after visitor analytics consent.
• Data: page and referrer information, browser and device characteristics, analytics identifiers, and network information required to provide analytics.
• Controls: measurement ID G-66RYKGCE16; Tag Manager container GTM-TTBDPM9J; analytics is disabled until affirmative consent; Asuruas keeps advertising storage, advertising user data, and advertising personalization denied by default.
• Provider: Google LLC and applicable Google affiliates under their published service and data-processing terms.

PostgreSQL, Redis, MinIO-compatible object storage, Nginx, and Playwright browser workers are software components operated within Asuruas infrastructure. They are not separate third-party subprocessors merely because their software is used.

Planned material additions or replacements are announced through this register, account communication, or another reasonable channel before processing when practicable. Customers covered by the DPA may object on reasonable data-protection grounds as described there. Urgent security or continuity changes may occur sooner with notice as soon as reasonably practicable.

A Customer may connect other providers, destinations, or integrations. Those providers are selected by Customer and are not Asuruas subprocessors unless Lancaster Solutions LLC contracts with them to process Customer Personal Data on our behalf.