Effective: July 1, 2026

What Are Subprocessors

Drive. engages third-party subprocessors to help operate and maintain the Service. A subprocessor is a third-party data processor engaged by Drive. who may process customer data. All subprocessors are contractually bound to protect your data in accordance with our Privacy Policy and applicable data protection laws.

We conduct security assessments of all subprocessors before engagement and monitor their compliance continuously. We take reasonable technical, organizational, and contractual measures to ensure subprocessors provide the same level of data protection as Drive.

Current Subprocessors

Provider Purpose Location
Hetzner
Cloud infrastructure — virtual servers, networking, and storage for the backend API and databases. Self-managed, no shared tenancy with customer data.
Germany
MongoDB Atlas
Managed database service. Stores encrypted file blobs, account metadata, and group information. No plaintext file content is stored.
Germany
Redis (Self-Hosted)
In-memory caching for session data and presence information. Self-hosted on Hetzner infrastructure. No persistent user data stored.
Germany
Google Cloud Platform
Object storage for encrypted file uploads (Cloud Storage). Push notification delivery via Firebase Cloud Messaging. Apple/Google Play in-app purchase verification.
United States
Apple
App distribution via App Store, push notification delivery (APNs), and in-app purchase processing.
United States
Twilio
Email delivery for OTP verification codes. Email addresses are never stored permanently in Twilio systems.
United States
Cloudflare
DNS management, DDoS protection, CDN for static assets (website), and TLS termination.
United States
GitHub
Source code hosting, issue tracking, and CI/CD pipelines. No production data is processed.
United States
Sentry
Error and performance monitoring for the backend API. Crash data is anonymized and never contains file content.
United States

Data Processing Agreements

Each subprocessor is governed by a Data Processing Agreement (DPA) that includes:

Notification of Changes

We maintain an up-to-date list of subprocessors on this page. If we add or replace a subprocessor, we will update this page and notify affected customers via email at least 30 days before the new subprocessor begins processing data.

Contact

For questions about our subprocessors or data processing agreements:

Email: dpo@drivedot.cloud