Last updated: October 9, 2026
A sub-processor is a third party that processes personal data our customers have entrusted to us. This page lists every one we use, what each does, and where. It is Schedule 3 of our Data Processing Agreement.
| Sub-processor | What it does for us | Customer personal data it handles | Where |
|---|---|---|---|
| Hetzner Online GmbH Germany | Hosting: the servers that run the application, the database, the cache, and the local backup copies | All Customer Personal Data | Hillsboro, Oregon, United States |
| Cloudflare, Inc. United States | DNS and TLS proxy for the pathbound.ai domains; storage of our database backups and log archives | All Customer Personal Data in transit. Backups and log archives are encrypted before upload with a key Cloudflare does not hold | Cloudflare’s global network for traffic; backups in its Western North America region |
| Unipile SAS France | Connects a mailbox or messaging account a member chooses to link, and carries our requests to read it and to send from it Only if a member of your workspace links a mailbox or messaging account through Unipile. | The messages of the linked account. Unipile holds the connection and can reach everything in that account. Pathbound keeps only conversations with people who are already contacts in your workspace, and sends through it the messages you send from Pathbound | Stored in France. Connections to the linked account may be routed through network providers in the European Union, Israel, Singapore, or the United States |
We email the owner and admins of every workspace at least 14 days before a new sub-processor starts processing customer personal data, and we update this page. If you object on data-protection grounds, write to [email protected] within that period. Section 7 of the Data Processing Agreement sets out what happens next.