Sub-processors
Last updated: 25 August 2026
These are the third parties that process data on our behalf so that Krrim can operate. Each is bound by contract to protect it and to use it only for the purpose listed.
Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Oracle Cloud Infrastructure | Application hosting, database and object storage | All workspace content and account data | India |
| Cloudflare, Inc. | DNS, TLS termination and denial-of-service protection | Request metadata and IP addresses in transit | Global edge network |
| Functional Software, Inc. (Sentry) | Error reporting and performance monitoring | Stack traces, request paths, user identifiers | United States |
| Email delivery provider | Transactional and notification email | Recipient addresses and message contents | To be confirmed |
| Payment processor | Subscription billing and payment card handling | Billing contact details and payment information | To be confirmed |
How we choose them
We keep this list as short as the Service allows. Each provider is assessed for its security posture and its data protection commitments before we use it, and each receives only the data it needs for the purpose named above — not a copy of everything.
Changes to this list
We will give at least 30 days’ notice before adding a new sub-processor or materially changing what an existing one does. To be notified, email privacy@krrim.com and ask to be added to the notification list.
If you object to a new sub-processor on reasonable data protection grounds, tell us within the notice period. We will work with you to find an alternative, and if we cannot, you may terminate the affected part of the Service.
International transfers
Where a provider processes personal data outside the region it was collected in, that transfer is covered by appropriate safeguards — typically Standard Contractual Clauses. Details are available on request.
Related documents
See the privacy policy for what we collect and why, the data processing addendum for the terms governing our role as processor, and the security page for how workspaces are separated.