Legal
Subprocessors
Vendors and infrastructure providers Mailthentic uses to deliver the service.
Last updated: May 2026
Verify this list reflects your actual vendors before publishing.
Entries below match the architecture documented in VERIFICATION_ARCHITECTURE.md. Update or remove any entry that doesn't match your real deployment, and add any vendor not listed.
The vendors below process Controller data on our behalf as part of delivering the Mailthentic service. We notify customers at least 30 days before adding a new subprocessor; see Section 5 of our Data Processing Agreement.
Infrastructure
| Vendor | Purpose | Region | Data accessed |
|---|---|---|---|
| Amazon Web Services (AWS) | Application hosting (EC2), object storage | United States | All Controller data while in transit and at rest |
| Hostinger | SMTP verification worker (port 25 egress) | European Union | Email addresses being verified, domain MX data |
Billing & Payments
| Vendor | Purpose | Region | Data accessed |
|---|---|---|---|
| Stripe | Payment processing, subscription billing, invoicing | United States, Ireland (EU) | Customer name, billing email, payment details, transaction history |
Communications
| Vendor | Purpose | Region | Data accessed |
|---|---|---|---|
| Transactional email provider | Account verification, password reset, billing notifications | United States | Email address, account-related message content |
Analytics & Monitoring
| Vendor | Purpose | Region | Data accessed |
|---|---|---|---|
| Google Analytics | Anonymous marketing-site usage analytics | United States | Anonymised page-view metadata; not Controller list data |
Updates & Notifications
To receive notification of changes to this list, email privacy@mailthentic.com with the subject "Subprocessor updates".