# Sub-processors

This page describes the third parties (“Sub-processors”) that Rebilly engages to process personal data on behalf of customers when providing the Rebilly Services.

Capitalized terms not defined on this page have the meanings given in the Rebilly Subscription Agreement and Data Processing Addendum (“DPA”).

## What is a sub-processor?

A **Sub-processor** is a third party engaged by Rebilly to process personal data on Rebilly’s behalf for the purpose of providing the Services (for example: hosting, monitoring, customer support tooling, email delivery, or security services).

## Important note about integrations you configure

Rebilly is an integration platform. Customers can connect the Services to many third-party systems (for example: payment gateways, processors, tax, fraud, analytics, CRM, messaging, and other tools) (“**Customer-Configured Integrations**”).

- **Customer-Configured Integrations are controlled by Customer** (Customer chooses whether to connect them and what data to send).
- These providers may process personal data as independent recipients and/or processors for Customer.
- **They are not listed on this page** because the set of integrations varies by Customer and could be extensive.
- Customer is responsible for its own agreements with providers of Customer-Configured Integrations and for ensuring such providers comply with applicable data protection laws.


Where a third party is used by Rebilly as part of operating the core Services (and not merely because a Customer chooses to connect it), it will be listed below as a Sub-processor. For more information about Customer-Configured Integrations, see the Subscription Agreement section on sub-processors and third-party integrations.

## How we use sub-processors

Rebilly may use Sub-processors for:

- cloud infrastructure and hosting
- monitoring, logging, and incident response
- customer support and ticketing
- email delivery and notifications
- security, fraud prevention, and abuse detection
- backups and disaster recovery


## Sub-processor list

The table below lists Rebilly’s current Sub-processors, the purpose of processing, and the processing location(s). This list may include affiliates that provide parts of the Services.

| Sub-processor | Service / purpose | Processing location(s) |
|  --- | --- | --- |
| AWS (Amazon Web Services Inc) | Cloud hosting / infrastructure | US |
| Google | Image processing for KYC; AI-assisted automation and analysis | US |
| Datadog | Monitoring / logging / observability | US |
| Sentry | Error tracking / observability | US |
| ClearFeed | Customer support ticketing | US |
| Mailgun Technologies, Inc. | Email delivery / notifications | US |
| ClickHouse, Inc | Analytics (service operations) | US |


Processing locations may vary depending on Customer configuration, region, and service availability.

## Changes and notification

Rebilly may update this list from time to time.

### Notification of new sub-processors

When Rebilly adds a new Sub-processor, Rebilly will notify customers by email to the primary contact email address on file or by posting an update to this page. Rebilly will provide at least thirty (30) days’ advance notice before authorizing a new Sub-processor to process personal data on behalf of customers, except where such notice is not practicable (for example, in cases of emergency security updates or where required by law).

### Objecting to new sub-processors

If you object to a new Sub-processor, you must notify Rebilly in writing at **legal@rebilly.com** within thirty (30) days of receiving notice of the new Sub-processor. Rebilly will work with you in good faith to address your concerns, which may include:

- Providing additional information about the Sub-processor’s data protection practices
- Implementing additional safeguards
- Finding an alternative solution


If Rebilly cannot address your reasonable concerns and you continue to object, you may terminate the affected Services by providing written notice to Rebilly as your sole and exclusive remedy. Rebilly will provide a pro-rated refund of any prepaid fees for the terminated Services.

The objection and termination rights described above apply only to new Sub-processors added after the effective date of your Subscription Agreement. Existing Sub-processors listed above are authorized under your current agreement.

## Questions

If you have questions about Rebilly’s Sub-processors, contact: **legal@rebilly.com**.

*Last updated: 2026-01-21*