Subprocessors

Domza relies on a small number of trusted third-party processors to run the service. Each is bound by a data-processing agreement and appropriate transfer safeguards. This page is the authoritative list referenced by our Privacy Policy and the owner Data Processing Agreement.

We will update this page and notify owners by email before adding new subprocessors, so you (as controller of your guest data) can object before new processing begins.

• Amazon Web Services (AWS)

  RoleHosting, database, object storage, compute
  RegionIreland (eu-west-1)
  Data categoriesAll operational data at rest: owner accounts, property data, guest messages, media, backups
  Websiteaws.amazon.com
  SCC statusEU region; SCCs in place for any out-of-region support

• Anthropic

  RoleAI model inference for the concierge and issue detection
  RegionUnited States
  Data categoriesGuest message content and the property prompt sent per request; no training on API content
  Websiteanthropic.com
  SCC statusSCCs required (US transfer)

• Resend

  RoleTransactional email delivery (signup, notifications)
  RegionUnited States
  Data categoriesRecipient email address and email content (verification links, owner notifications)
  Websiteresend.com
  SCC statusSCCs required (US transfer)

• Upstash

  RoleServerless Redis: landing-demo cost ledger and per-session message counter
  RegionIreland (eu-west-1)
  Data categoriesDaily aggregate cost totals (USD float) and per-session message counters (integers) keyed by an opaque random session ID. No message content, no IP, no user identifiers.
  Websiteupstash.com
  SCC statusEU region; SCCs in place for any out-of-region support

Where a subprocessor operates outside the European Economic Area, the transfer is governed by Standard Contractual Clauses (SCCs) or an equivalent GDPR-approved mechanism, as indicated in the table. Data stored at rest lives in the EU (AWS Ireland).

When we add, remove, or change a subprocessor, we update this page and notify owners by email before the change takes effect. For questions about this list or to object to a proposed change, contact privacy@domza.ai.