Subprocessor List
Last updated: June 24, 2026
TvRMM uses subprocessors to host, secure, bill, monitor, deliver, and operate the service. This list is intended to be public and customer-readable.
Current subprocessors and providers
| Provider | Purpose | Data involved |
|---|---|---|
| Microsoft Azure | Hosted portal, agent check-in services, compute, storage, database, networking, package hosting, monitoring, and production infrastructure. | Customer tenant data, endpoint data, operational records, logs, billing metadata, service telemetry. |
| Stripe | Checkout, payment processing, customer portal, invoices, refunds, payment status, and billing webhooks. | Billing metadata, payment status, customer identifiers, invoice and refund records. Stripe handles payment method details directly. |
| Cloudflare | DNS, domain security, edge routing, and email/contact-form routing where used. | DNS and routing metadata, security logs, contact-routing metadata where applicable. |
| OVH / shared edge infrastructure | Static product website hosting and edge delivery where used. | Website request metadata and static-site delivery records. |
| vanRoojen LLC operated analytics | Privacy-preserving website analytics for the product site. | Page views, referrers, device/browser metadata, approximate analytics data. |
| GitHub | Source control, issue/PR workflow, release automation, and CI/CD operations. | Source code, deployment metadata, operational artifacts, issue or support context when intentionally added. |
Provider principles
TvRMM prefers providers that support:
- clear security boundaries;
- least-privilege access;
- customer data portability;
- operational auditability;
- no sale of customer operational data;
- reasonable incident and reliability practices.
Changes
TvRMM may add, remove, or replace subprocessors as the service changes. Material new subprocessors should be reflected on this page and announced where practical before they process Customer Data in a materially new way.
Objections
Customers with a reasonable objection to a new material subprocessor should contact TvRMM promptly. TvRMM will review the objection in good faith, but may not be able to provide the service without core infrastructure, payment, security, email, or operations providers.