Sub-processors
Last updated: July 25, 2026 · version 2026-07-25
Networkbase engages the following sub-processors to provide the Service. We require each to be bound by data-protection obligations no less protective than our Data Processing Agreement, and we remain liable for their performance. For transfers outside Canada and the EEA we rely on Standard Contractual Clauses or an equivalent safeguard (such as the EU–US Data Privacy Framework where the recipient is certified).
| Sub-processor | Purpose | Data processed |
|---|---|---|
| Mailgun | Transactional + campaign email delivery | Recipient name, email, message content, engagement events |
| OpenAI | AI-assisted drafting for organizers (writing assistance, organizer plan drafts) | Prompt and draft content, which may include member names and activity context; not used to train OpenAI models per API terms |
| Stripe | Payment processing | Name, email, payment references (no card numbers stored by us) |
| Amazon Web Services (S3, CloudFront) | File/asset storage and CDN | Uploaded files, avatars, logos |
| Sentry | Error monitoring (PII-scrubbed) | Error/diagnostic data (scrubbed) |
| Managed database host | Application database hosting | All application personal data |
Changes
We provide advance notice of any new or replaced sub-processor to account administrators, during which a customer may object on reasonable data-protection grounds.
Contact
Questions about our sub-processors: privacy@networkbase.ca.