tanahLegal
Sub-processors
A sub-processor is a third party Tanah engages to process personal or customer data on its behalf. Below is the category-level register of sub-processor services used to operate the platform. Once customer agreements are in force, the named sub-processors and their jurisdictions will be disclosed to customers under the data-processing terms.
Each engaged service is bound by a written data-processing agreement, processes data only on documented instructions from Tanah, and is subject to confidentiality and security obligations equivalent to those we hold ourselves to.
| Service | Region | Data categories |
|---|---|---|
| Frontend hosting and edge runtime | United States, European Union | Request metadata, IP address |
| Backend application and worker hosting | United States | Request metadata, application data |
| Managed Postgres database | United States | All persisted user and account data |
| Authentication and session management | United States | Email address, password hash, session identifiers |
| Status page and uptime monitoring | European Union | Status check telemetry |
| Transactional email delivery | United States | Email address, message metadata |
| Product analytics (product application; not this public site) | United States | Behavioural events, anonymised session ID |
| Error tracking and exception reporting (product application and services) | United States | Error stack traces, user identifiers |
Notification of changes
Once customer agreements are in force, when we add or replace a sub-processor that handles customer data we will notify active customers by email at least 30 days before the change takes effect. Customers may object on reasonable grounds; if we cannot accommodate the objection, the customer may terminate the affected service without penalty for the remainder of the contract term.