GDPR & Trust Compliance

Authorized Subprocessors Directory

To provide the Orgemy Creator Operating System, we partner with specialized third-party infrastructure and technology providers. Each subprocessor is vetted for strict security, GDPR compliance, and data confidentiality standards.

Subprocessor EntityService & RoleLocationTransfer Mechanism
Cloudflare, Inc.Edge Routing, WAF, CDN, Turnstile & Object StorageUnited States & Global EdgeEU Standard Contractual Clauses (SCCs) / DPF
Contabo GmbHPrimary Infrastructure Server & Dedicated PostgreSQL HostingGermany / European UnionDirect EU Processing (GDPR compliant)
Resend, Inc.Transactional Email Delivery InfrastructureUnited StatesEU Standard Contractual Clauses (SCCs)
Paddle.com Market LtdSaaS Subscription Billing & Merchant of Record for Orgemy PlansUnited Kingdom / GlobalUK GDPR Adequacy / SCCs
Stripe, Inc.Creator Commerce Connector & Direct Payout FacilitatorUnited States & GlobalEU Standard Contractual Clauses (SCCs) / DPF
PayPal Pte. Ltd.Creator Commerce Connector & Multiparty Payout FacilitatorSingapore & United StatesBinding Corporate Rules (BCRs) / SCCs
Redis / Upstash, Inc.In-Memory Cache, Rate Limiting & Queue TelemetryEuropean Union & United StatesEU Standard Contractual Clauses (SCCs)

Subprocessor Modification & Notice

Orgemy provides workspace administrators with at least thirty (30) days advance notice before engaging any new subprocessor. Customers may object to any material change by notifying privacy@orgemy.com within thirty days of notice.