LEGAL
Sub-processors
Every third party that processes customer data on our behalf. We add to this list only with 30 days’ notice.
Last updated: 16 September 2026 · v1.0 · Download PDF
This page lists the sub-processors engaged by InsideMaps Bulgaria EOOD (StatusDNS) to process personal data on behalf of customers under the Data Processing Addendum. It is deliberately short: the Service is built and operated by us, and most data it handles is public infrastructure data.
1. Current Sub-processors
| Sub-processor | Purpose | Location of processing | Transfer safeguard |
|---|---|---|---|
| OVH SAS (OVHcloud) 2 rue Kellermann, 59100 Roubaix, France | Hosting of the application servers, database, backups and logs | Data centre in Virginia, United States | OVH data-processing agreement incorporating the EU Standard Contractual Clauses |
| Resend, Inc. San Francisco, California, United States | Delivery of transactional email: account emails, alerts, digests (recipient address, subject, content) | United States; sending region configured as EU (eu-west-1) | Resend data-processing agreement with EU Standard Contractual Clauses |
| Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, United States | Authoritative DNS for statusdns.com and reverse proxy / TLS termination in front of the website and API (request metadata including client IP address) | United States; global edge network | Cloudflare data-processing addendum; EU–US Data Privacy Framework certification and EU Standard Contractual Clauses |
2. Independent Controllers (not sub-processors)
| Party | Role | Location |
|---|---|---|
| Paddle.com Market Ltd Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom | Merchant of Record for paid plans: collects payment and billing details, issues invoices, handles tax and refunds. Paddle determines its own processing and is covered by its privacy policy. | United Kingdom (EU adequacy decision) |
| Google LLC (Google Fonts) | Serves the Inter web font to visitors’ browsers; receives the browser’s request metadata. | United States |
| Public DNS, RDAP/WHOIS and blacklist operators | Receive the domain or IP address being checked, by the nature of the lookup. No account data is sent. | Worldwide |
3. Changes to This List
Before adding or replacing a sub-processor we update this page and email account holders at least 30 days in advance. Customers may object under Section 5 of the DPA. Removal of a sub-processor takes effect immediately. Questions: [email protected].