Subprocessors

A subprocessor is a vendor we engage to Process data on our behalf to run the Service. We keep the list below current, bind each subprocessor by contract to protect data under terms no less protective than our Data Processing Addendum, and use each only to provide its service to us. Because ShiftGraph is value-free by design, our subprocessors handle account, billing, and operational data and value-free structural metadata, never the request or response values inside your traffic.

Current subprocessors

Some entries name the specific managed provider we operate on; where a category lists more than one option, we use one of them for a given environment and will name the specific provider on request.

Change notification and objection

Before we add or replace a subprocessor that Processes Customer Personal Data, we update this page and, for customers who subscribe to subprocessor notifications, give at least thirty (30) days’ advance notice. During that period you may object on reasonable data-protection grounds under Section 6 of the DPA; if we cannot offer a commercially reasonable accommodation, you may terminate the affected Service for a pro-rata refund of prepaid, unused fees. To subscribe to notifications, email privacy@shiftgraph.dev.

A note on infrastructure regions

ShiftGraph operates from the United States, and the subprocessors above may Process data in the United States. Enterprise customers may be eligible for regional data pinning; contact hello@shiftgraph.dev to discuss. International transfers are governed by Section 11 of the DPA.