Data processing
Sub-processors.
The categories of providers that process personal data for Mailtruss. Last updated 13 November 2026.
Current sub-processors
| Category | What it does | Data | Location | Safeguards |
|---|---|---|---|---|
| Email delivery infrastructure | Carries messages to receiving mail servers and reports delivery events | Message content, sender and recipient addresses, delivery events | United States | Written processing agreement; encryption in transit |
| Cloud hosting and edge network | Runs the website, API and background jobs; stores attachments | All Customer Data in transit and attachments at rest | Global edge network; storage in the United States | Written processing agreement; encryption in transit and at rest |
| Managed database | Stores the Service’s data | Account data, messages, contacts, events, logs | United States | Written processing agreement; encryption at rest and in transit; row-level security; no public API access |
| Payment processor and merchant of record (Dodo Payments) | Sells paid plans, takes payment, issues invoices and handles taxes, once paid plans open | Billing contact, plan, payment details (held by the processor, not by us) | As stated in its own terms | Its own terms and privacy notice |
| Product analytics (PostHog) | Counts visits to public pages | Pseudonymous page-view data, only with the visitor’s consent; no email addresses, no sessions recorded | European Union | Written processing agreement; consent; loaded through our own domain |
Names and changes
Customers can ask for the names of the providers in each category by writing to privacy@mailtruss.com; we reply to the owner email address of an account. We give customers at least 14 days’ notice by email before adding or replacing a sub-processor that will process their personal data, as set out in the Data Processing Addendum. Where a provider processes data outside India, it does so in a country the Government of India has not restricted.