Legal
Sub-processors
Last updated: August 20, 2026
This is the complete list of third parties that process personal data on behalf of Arche Software Studio Inc. to provide the SecureStamp services. Each is bound by a data processing agreement and processes data only on our instructions.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure: DynamoDB (database), S3 (encrypted attachments), KMS (key custody), Cognito (authentication), SNS (notifications), Secrets Manager. | us-east-1 · Virginia, USA |
| Stripe, Inc. / Stripe Connect | Payment processing, subscriptions, usage metering and artist payouts. We never store card data. | USA / EEA |
| Vercel Inc. | Hosting and delivery of the three web applications. | USA / global edge |
| avnam | Delivery of all outbound email over SMTP: transactional messages, notifications and security alerts. | EEA |
| Cloudflare, Inc. | Turnstile: anti-abuse verification on public forms. Processes IP address and browser device signals. | Global |
| Kapso | Gateway for the SecureStamp Signal bot on WhatsApp Business. | Global |
| Telegram FZ-LLC | Gateway for the SecureStamp Signal bot on Telegram. | Global |
| Google · Microsoft · Apple · Meta | OAuth identity providers. Only involved if you choose to sign in with one of them. | Global |
Change notification
If we add or replace a sub-processor handling personal data, we update this page and its date before the change takes effect. Customers with a signed data processing agreement receive at least 30 days notice and may object on reasonable data protection grounds.
To subscribe to change notices, write to privacy@securestamp.online.