1. How we use subprocessors#
TopMod carefully selects subprocessors that support the delivery, operation, maintenance and security of the Services. Each subprocessor is subject to contractual obligations requiring appropriate confidentiality, security and data protection measures.
2. Changes to subprocessors#
TopMod may appoint new Subprocessors or replace existing Subprocessors from time to time.
Where a change involves a Subprocessor that will process Customer Personal Data in connection with the Services, TopMod will provide at least fifteen (15) days’ prior notice by updating this Subprocessor List and, where reasonably practicable, notifying affected Customers by email or through the Services.
A Customer may raise a reasonable written objection to a new Subprocessor on legitimate data-protection grounds during that notice period. TopMod and the Customer will work together in good faith to address the objection.
If the parties cannot resolve the objection through commercially reasonable measures, the Customer may terminate the affected portion of the Services by written notice before the new Subprocessor begins processing Customer Personal Data. TopMod will refund any prepaid Fees attributable to the unused terminated portion of the Subscription Term.
3. Current subprocessors#
| Subprocessor | Country | Purpose & data processed |
|---|---|---|
| OVH Groupe SA | France | Cloud infrastructure, application hosting and object storage. May process Customer Data, recordings, files, account information, telemetry and technical logs. |
| Supabase, Inc. | United States | Database hosting, authentication and backend platform services. May process account information, authentication information, Customer Data, usage information and technical logs. |
| Netlify, Inc. | United States | Website and web-application deployment, hosting and content delivery. May process account information, IP addresses, usage information and technical request logs. |
| PostHog, Inc. | United States | Product analytics, feature-usage analytics and application telemetry. May process user identifiers, device and browser information, IP addresses, feature-usage data and application telemetry. TopMod does not intentionally provide the substantive content of recordings, screenshots, attachments or bug reports to PostHog. |
| Functional Software, Inc. d/b/a Sentry | United States | Application monitoring, error tracking and performance diagnostics. May process user identifiers, device information, IP addresses, application errors, diagnostic information and technical logs. TopMod takes reasonable measures to avoid including the substantive content of Customer Data in diagnostic events. |
| Atlassian Pty Ltd | Australia | Project management, issue tracking and customer-support services. May process account contact information, support communications, attachments and other information submitted in connection with a support request. |
4. Subprocessor categories#
- Cloud infrastructure and hosting
- Identity and authentication
- Customer support
- Email and communications
- Monitoring and observability
- Analytics
- Object storage and content delivery
- Payment processing
- Error reporting and diagnostics
5. International transfers#
Where a subprocessor transfers Personal Data outside the United Kingdom, the European Economic Area or another jurisdiction recognised as providing an adequate level of data protection, TopMod ensures that appropriate transfer safeguards are in place in accordance with applicable Data Protection Laws. These safeguards may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement (IDTA), the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, adequacy regulations recognised under UK law, the EU-U.S. Data Privacy Framework (where applicable), or another lawful transfer mechanism recognised under applicable law.
Further information about the transfer safeguard applicable to a particular Subprocessor will be made available to the Customer upon reasonable written request.
6. Changes to this list#
TopMod may update this Subprocessor List from time to time as service providers are added, removed or replaced. The current version will be published on the TopMod website. Material changes will be managed in accordance with the TopMod Data Processing Addendum.
7. Contact#
For questions regarding subprocessors or international transfers, please contact legal@topmod.dev.