Trust
Subprocessors
Last updated
Effective date: July 1, 2026. Last list update: October 29, 2026.
This page lists the subprocessors that SimpleNewsletter365 uses to process personal data on behalf of customers, as referenced in our Data Processing Addendum. We keep this list current and provide notice of changes.
Subprocessors we use
Each organization has one home region, EU or US (see the Privacy Policy). Customer content is processed only by the subprocessors of its home region.
| Subprocessor | Purpose | Data processed | Location | Transfer mechanism | Last changed |
|---|---|---|---|---|---|
| Microsoft Corporation (Azure) (Azure SQL, Blob Storage, Key Vault, App Service) | Application hosting, database, image asset storage and encryption key management | EU region: all account and audience data of EU organizations. US region: the same for US organizations. Global service: routing keys, home region, account flags, billing data | EU: West Europe (Netherlands). US: Central US. Global service: West Europe | EU-US Data Privacy Framework (Microsoft Corporation, verified on the DPF list 2026-10-29). EU region data stays in the EU | 2026-10-29 |
| Lettermint | Transactional email for EU organizations (signup confirmations, system notifications) | Recipient email address and transactional message content | Lettermint B.V., Netherlands (EU processing, no transfer outside the EEA) | None needed | 2026-10-29 |
| Plus Five Five, Inc. (Resend) | Transactional email for US organizations (signup confirmations, system notifications) | Recipient email address and transactional message content | United States | EU-US Data Privacy Framework (listed as active, re-certification under review, 2026-10-29); Standard Contractual Clauses in Resend’s DPA as fallback | 2026-10-29 |
Merchant of record and payment provider
Link, LLC is the merchant of record for all paid orders, sold through Stripe Managed Payments. It is not a subprocessor of customer content. Billing data is not bound to the home region.
| Provider | Purpose | Data processed | Location | Transfer mechanism | Last changed |
|---|---|---|---|---|---|
| Link, LLC (merchant of record, sold through Link) | Orders, payment, taxes, receipts and invoices | Account holder billing identity, plan and transaction data | United States | Independent controller under its privacy policy. Link is part of Stripe, which states that it complies with the EU-U.S. Data Privacy Framework and uses the EU Standard Contractual Clauses (link.com/privacy, checked 2026-10-29) | 2026-10-29 |
| Stripe (Stripe Managed Payments) | Subscription billing and payment processing | Account holder billing identity, plan and transaction metadata | United States and global | EU-US Data Privacy Framework (Stripe, LLC, verified on the DPF list 2026-10-29) | 2026-10-29 |
Website hosting and DNS
| Provider | Purpose | Data processed | Location | Transfer mechanism | Last changed |
|---|---|---|---|---|---|
| Cloudflare, Inc. | Hosting (Cloudflare Pages) and DNS for this website | Website visitor request data such as IP address | Global network, United States | EU-US Data Privacy Framework (Cloudflare, Inc., verified on the DPF list 2026-10-29) | 2026-10-29 |
Our own services
This website measures visits with self-hosted Rybbit at
analytics.simplesoftware365.com. We operate it ourselves and it is cookieless.
See the Privacy Policy.
| Provider | Purpose | Data processed | Location | Transfer mechanism | Last changed |
|---|---|---|---|---|---|
| Hetzner Online GmbH | Hosts our self-hosted, cookieless website analytics (Rybbit) | Website visit data such as page URLs, referrers, browser and device metadata | Germany, EU data centers | EU processing, no transfer outside the EEA | 2026-10-29 |
Important note on the sending path
SimpleNewsletter365 does not operate a shared email-sending service. Your newsletters are sent from your own Microsoft 365 mailbox through Microsoft Graph. Microsoft 365, Entra ID and Graph are your own tenant services, which we access on your instruction and do not list as our subprocessor. Microsoft, as the operator of your tenant, processes the message and recipient data in the normal course of delivering your mail, under your agreement with Microsoft.
Changes
We will update this page and, where required, notify customers before adding a new subprocessor that processes their personal data. To receive change notifications, contact hello@simplenewsletter365.com.