1. Core service providers
- Google Cloud Platform / Firebase — application hosting, authentication, serverless processing, database and file storage, application integrity, abuse prevention, secrets, and operational logging. Processing location depends on the configured service and Google’s infrastructure.
- Contabo — infrastructure hosting for Envelaro-operated mail and collaboration services. Open-source Mailu and related software run under Envelaro’s administration; customers do not receive server-level access.
- MailerSend — transactional account, verification, support, and service-notification email where that delivery route is used.
2. Feature-specific providers
- Cloudflare — customer-authorised DNS automation, real-time communication connectivity, optional R2 storage, and AI assistance where the relevant feature is enabled.
- OpenAI — AI-assisted tenant administration or content features only when the customer invokes or enables the relevant feature.
- Stripe — checkout, subscription billing, payment records, and fraud prevention when Stripe checkout is offered for the customer’s region and order.
Customer-directed integrations such as a DNS registrar, Microsoft, Google Cloud DNS, or an external storage provider process data under the customer’s own account and instructions. Their independent terms also apply.
3. Processing boundaries
A provider receives only the categories reasonably needed for its stated purpose. Open-source software operated by Envelaro is not itself a subprocessor unless its operator receives customer personal data.
Payment-card numbers are collected by the payment provider’s hosted payment surface and are not stored in Envelaro application databases.
4. Changes
This list will be updated when a provider is added, replaced, or materially changes purpose. Contracted customers will receive any notice required by their final DPA.
Contact
Questions, rights requests, or abuse reports can be submitted through our contact page. Please do not include passwords, mailbox contents, or unnecessary sensitive information.