Subprocessors
Last updated: April 6, 2026
DMARCit uses the following third-party service providers ("subprocessors") to help deliver the Service. Each subprocessor is bound by data processing obligations no less protective than those described in our Data Processing Addendum.
Current Subprocessors
| Provider | Purpose | Data Categories | Region |
|---|---|---|---|
| Supabase, Inc. | Database hosting, user authentication, and session management | Account data, organization data, DMARC report data, domain configurations, user sessions | US East (N. Virginia) — us-east-1 |
| Stripe, Inc. | Payment processing, subscription management, and billing | Billing data, subscription status, payment method identifiers (DMARCit does not store full card numbers) | United States |
| Amazon Web Services (AWS) — Simple Email Service (SES) | Transactional email delivery (invitations, alerts, account notifications) | Recipient email addresses, email content | US East (N. Virginia) — us-east-1 |
| Amazon Web Services (AWS) — Simple Storage Service (S3) | Storage of incoming DMARC report emails received via SES | Raw DMARC report emails (containing RUA aggregate data, sender IP addresses, authentication results) | US East (N. Virginia) — us-east-1 |
| Amazon Web Services (AWS) — Route 53 | Hosted SPF record management and DNS publishing for SPF flattening | Domain names, SPF DNS record data (no personal data) | Global (AWS Route 53 is a global service) |
| IPinfo | IP address geolocation and organization lookup for DMARC report enrichment | IP addresses from DMARC aggregate reports (server-side lookups only) | United States |
| Vercel, Inc. | Application hosting, serverless functions, and content delivery | All data transmitted to and from the Service (in transit), server logs, cron job execution | Washington, D.C., USA (iad1) |
Changes to This List
We may update this list when we engage new subprocessors or replace existing ones. In accordance with our DPA, we will provide customers with at least 30 days advance notice before a new subprocessor begins processing customer data.
Notifications of subprocessor changes will be sent to the email address associated with your account. If you object to a new subprocessor, please contact us at privacy@dmarcit.io within the notice period.
Questions
If you have questions about our subprocessors or data processing practices, contact us at privacy@dmarcit.io.