Effective: July 1, 2026

What Are Subprocessors

White Dot engages third-party subprocessors to help operate and maintain the Service. A subprocessor is a third-party data processor engaged by White Dot who may process customer data. All subprocessors are contractually bound to protect your data in accordance with our Privacy Policy and applicable data protection laws.

We conduct security assessments of all subprocessors before engagement and monitor their compliance continuously. We take reasonable technical, organizational, and contractual measures to ensure subprocessors provide the same level of data protection as White Dot.

Current Subprocessors

Provider Purpose Location
Hetzner
Cloud infrastructure — virtual servers, networking, and storage for the backend API and databases. Self-managed, no shared tenancy with customer data.
Germany
MongoDB Atlas
Managed database service. Stores encrypted message blobs, account metadata, and group information. No plaintext message content is stored.
Germany
Redis (Self-Hosted)
In-memory caching for session data and presence information. Self-hosted on Hetzner infrastructure. No persistent user data stored.
Germany
Google Cloud Platform
Object storage for encrypted media uploads (Cloud Storage). Push notification delivery via Firebase Cloud Messaging. Apple/Google Play in-app purchase verification.
United States
Apple
App distribution via App Store, push notification delivery (APNs), and in-app purchase processing.
United States
Twilio
SMS delivery for OTP verification messages. Phone numbers are never stored permanently in Twilio systems.
United States
Cloudflare
DNS management, DDoS protection, CDN for static assets (website), and TLS termination.
United States
GitHub
Source code hosting, issue tracking, and CI/CD pipelines. No production data is processed.
United States
Sentry
Error and performance monitoring for the backend API. Crash data is anonymized and never contains message content.
United States

Data Processing Agreements

Each subprocessor is governed by a Data Processing Agreement (DPA) that includes:

Notification of Changes

We maintain an up-to-date list of subprocessors on this page. If we add or replace a subprocessor, we will update this page and notify affected customers via email at least 30 days before the new subprocessor begins processing data.

Contact

For questions about our subprocessors or data processing agreements:

Email: dpo@whitedot.chat