Last updated: October 22, 2026
Sub-processors
Current as of = e($lastUpdated) ?>.
PunchdIn uses the following Sub-processors to provide the Service. This list is referenced in Annex III of our Data Processing Agreement. We will notify Customers at least 30 days before changing this list.
| Sub-processor | Service | Processing location | Data categories | Transfer mechanism |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud hosting, data storage, backups | Frankfurt, Germany (eu-central-1) | All Customer Data at rest | Intra-EEA; no restricted transfer |
| Postmark (ActiveCampaign, LLC) | Transactional email delivery (invites, notifications) | United States | Recipient email address, message content | SCCs (Module Two) + supplementary measures |
| Twilio Inc. | SMS delivery (invite links, notifications) | United States | Recipient phone number, message content | SCCs (Module Two) + supplementary measures |
| Stripe Payments Europe, Ltd. | Payment processing and subscription billing | Dublin, Ireland | Customer name, billing address, payment method | Intra-EEA; no restricted transfer |
Notification of Changes
Customers who wish to receive email notifications of changes to this list can subscribe by contacting dpo@punchdin.com. Objections to a new Sub-processor can be submitted in writing within 30 days of notification, as described in Section 6.3 of the DPA.