Subprocessors

Microsoft Azure

Hosting, databases, file storage, messaging, key vaults, logs and monitoring, the content delivery network and firewall in front of certping.com, sending email (Azure Communication Services) and the AI assistant (Azure OpenAI Service).

Data: All customer data the Service holds.

Location: United States (Central US; logs and monitoring in East US 2; DNS also in West US and West US 2). The RDAP service also runs in France Central. The AI assistant may be processed in any region where Microsoft runs Azure OpenAI.

Stripe

Card payments, invoices, subscriptions and refunds.

Data: Email address, organization identifier, payment details you enter on Stripe's pages, and what you buy.

Location: United States, and other countries where Stripe's affiliates and subprocessors operate.

Openprovider (Hosting Concepts B.V.)

Domain name registration, as the registrar CertPing resells.

Data: Registrant contact details and the domain's nameservers.

Location: The Netherlands, where Openprovider is established, and other countries to which Openprovider transfers data with the safeguards its privacy policy describes.

NameSilo, LLC

Domain name registration, as the registrar CertPing resells, and email forwarding for domains it registers.

Data: Registrant contact details, the domain's nameservers, forwarding addresses and the email it forwards.

Location: United States, where NameSilo is established, or other countries where it operates.

ClouDNS (Cloud DNS Ltd.)

Secondary DNS for domains on CertPing's nameservers.

Data: The DNS records of those domains.

Location: Bulgaria, where ClouDNS is established. DNS records are served from its anycast network in about 65 locations on six continents.

PostHog

Product analytics, as the Privacy Policy describes.

Data: Usage Data, and after sign-in an internal user and organization identifier.

Location: United States.

Atlassian (Jira Service Management)

Support tickets.

Data: Your email address, your ticket and its attachments.

Location: Atlassian's hosting regions worldwide, unless a data residency region is set.

Let's Encrypt (Internet Security Research Group)

Issuing free certificates.

Data: Domain names and certificate requests.

Location: United States, and other countries where ISRG and its service providers operate.

Sectigo

Issuing paid certificates CertPing resells.

Data: Domain names and certificate requests.

Location: Europe, and other countries including the United Kingdom, the United States, Canada and India.

GlobalSign (GMO GlobalSign)

Issuing paid certificates CertPing resells.

Data: Domain names and certificate requests.

Location: Europe, Malaysia, the United States and Asia, and other countries where GlobalSign does business.

Tango Card, Inc.

Issuing gift card rewards.

Data: The email address of the person who receives a reward.

Location: United States, where Tango Card is established, or other countries where it operates.

Giftbit (Giftbit Inc. and Giftbit Corp.)

Issuing gift card rewards and showing them in a reward window.

Data: No personal data from CertPing. When you open a reward, Giftbit's page receives what your browser sends it, such as your IP address.

Location: Not stated in Giftbit's privacy policy, which says Giftbit uses cloud hosting providers.

RapidAPI (Nokia of America Corporation, dba Rapid) and the providers of its WHOIS and USPTO trademark data

Registration details of domains in look-alike and trademark checks, and trademark searches when our own copy of the USPTO's data cannot answer.

Data: Domain names and trademark search terms.

Location: United States and Germany, and the Nokia affiliates that receive data, for the RapidAPI marketplace. The API providers do not publish their own locations.

Team Cymru, Inc.

Naming the network each sending IP address belongs to in DMARC reports.

Data: IP addresses that sent email as your domains.

Location: United States, and other countries where Team Cymru or its service providers operate.

When you connect CertPing to a service of your own, such as Slack, Microsoft Teams, PagerDuty, ServiceNow, a webhook, your organization's identity provider, a cloud account or DNS provider to install certificates, or sign in with Google, GitHub, Microsoft or LinkedIn, we send that service what the connection needs. Those services act for you, not for CertPing, and are not listed here.

We update this page at least 30 days before a new subprocessor begins to process customer data, so that you can review the change. If you object to a new subprocessor, please contact us at the address below.

Questions: privacy@certping.com.