Legal
Subprocessors
Third parties authorized to process customer data in support of ShipMsg services.
Effective September 3, 2026
Current subprocessors
| Provider | Purpose | Primary processing location |
|---|---|---|
| Oracle America, Inc. (Oracle Cloud Infrastructure) | Cloud hosting, databases, backups, and object storage | United States |
| Cloudflare, Inc. | DNS, edge security, traffic protection, and Turnstile | Global |
| Meta Platforms, Inc. and applicable affiliates | WhatsApp Business Platform connectivity and messaging | Global |
| Twilio Inc. (SendGrid) | Transactional account and security email | United States |
| Stripe, Inc. and applicable affiliates | Payment processing and billing-event delivery | United States and regional processing locations |
Changes
We update this list before a new subprocessor begins materially different processing and provide contract customers a reasonable opportunity to object on legitimate data-protection grounds. Contract customers may request change notices at legal@shipmsg.com.
Scope
A provider is a subprocessor only when it processes customer personal data on ShipMsg's behalf. Customer-directed integrations and the customer's own Meta relationship may also make a provider an independent controller or the customer's direct processor. Professional advisers, banks and authorities receiving narrowly required information are not listed as routine service subprocessors. Launch-required tax, invoice or statement providers will be added before they receive customer personal data.