Subprocessors
Last updated: August 31, 2026 · Draft, not yet in force
A subprocessor is a vendor Paycux authorises to process Subscriber Personal Data on its behalf, as described in the Data Processing Addendum. The exact vendors Paycux will use for each category have not been finalised, so this page lists categories rather than company names — it will be updated with named vendors before the DPA is signed with any customer.
Current categories
| Category | Purpose | Data category | Transfer region |
|---|---|---|---|
| Cloud infrastructure — provider to be listed | Hosting the application, database and backups. | All Subscriber Personal Data processed by the Service. | Region to be confirmed |
| Transactional email — provider to be listed | Sending account, sign-in and notification emails. | Name and email address. | Region to be confirmed |
| Error monitoring — provider to be listed | Capturing crash and error diagnostics. | Technical metadata; limited personal data where it appears in an error. | Region to be confirmed |
| Payment processing — provider to be listed | Billing Subscribers for paid plans. | Billing contact details; payment data is handled directly by the processor. | Region to be confirmed |
| Customer support — provider to be listed | Managing support tickets and conversations. | Contact details and the content of support requests. | Region to be confirmed |
| Product analytics — provider to be listed | Understanding aggregate product usage. | Usage events; pseudonymised where possible. | Region to be confirmed |
How we would notify changes
Before adding a new subprocessor, Paycux intends to update this page at least ten (10) business days in advance. Subscribers who want an active notice of changes, rather than checking this page, can ask legal@paycux.com to be added to a notification list once one exists.
Objecting to a new subprocessor
If a Subscriber has a legitimate data-protection objection to a new subprocessor, it can raise it within the notice window above by emailing legal@paycux.com. The parties would then work in good faith to resolve the objection before the new subprocessor starts handling that Subscriber’s data.