A record of third-party providers involved in delivering, hosting, monitoring, or supporting the relevant Specicon services.
Who processes what, and why.
The register identifies the service provider, its processing purpose, relevant data categories, and applicable processing locations.
Provider
Purpose
Processing location
Data categories
Amazon Web Services
Compute, storage, managed database
ap-south-1, eu-central-1
All platform data
Cloudflare
CDN, WAF, DDoS protection
Global edge
Request metadata
Stripe
Card and ACH payment processing
US, EU
Billing contact, payment token
SendGrid
Transactional email
US
Email address, message content
Datadog
Metrics, logs, traces
eu-central-1
Operational telemetry, pseudonymous ids
Anthropic
Language generation for content modules
US
Product attributes, no customer identifiers
Changes to the provider register.
Updates to subprocessors are managed according to the applicable contractual notice and objection requirements. Customers should consult their agreement for the applicable notification process, notice period, and available rights.
Access limited to the service performed.
Each provider’s access should be limited to the information necessary for its contracted function, subject to relevant technical and contractual safeguards. The categories of information processed can differ between hosting, communications, monitoring, payment processing, and AI-related services.