CedraStack · Legal policies
Providers and Subprocessors
Cloudflare
Cloudflare supplies Workers application hosting/processing, D1 structured storage, R2 private object storage and Turnstile abuse verification. Data may include portal account, billing, support, document and security information, files and challenge/network metadata. Processing locations depend on the service and provider arrangement; no single-country residency is promised. See Cloudflare’s privacy information and Turnstile privacy addendum.
Brevo
Brevo delivers transactional account, security, invitation, support, invoice and report emails. It receives recipient details, message content and delivery metadata; copies/logs follow provider settings and terms. CedraStack requests no optional pixel tracking, with provider controls requiring account configuration. Hosting locations and transfer terms should be assessed for the service relationship.
Payment services and external contacts
Whish is a manual payment service where displayed, distinct from core portal hosting/email subprocessors. The client submits payment details to that service under its own terms and may upload a receipt for verification. Available methods are shown in checkout/invoices; no Payoneer or card integration is claimed. WhatsApp emergency links open an external service only when used. GitHub hosts source/CI and is not listed as a production customer-data processor.
Changes and questions
This list reflects the integrated platform services at this version. No provider is listed solely because CedraStack supports its products. Material provider changes relevant to an agreed DPA require prior communication and review under that agreement. Contact hello@cedrastack.com for provider or international-processing questions.
SHA-256: d7c8d86671751014235cba57098001acfa97dd3f6ac40b543e8593e5c31cf8ea