Subprocessors
Last updated September 25, 2026
Draft, not yet in effect. This document is being finalized. Highlighted text is still to be decided.
Questions to admin@alesiansecurity.com.
Alesian Security LLC ("Alesian", "we") uses the service providers below to host and run the Service. Each processes personal information only on our instructions and under written data protection terms. Our Privacy Policy explains what we collect, and our Data Processing Addendum explains how we handle personal data we process for customers.
We give at least 14 days' notice before adding a subprocessor that processes Customer Personal Data. To receive notice by email, write to admin@alesiansecurity.com with the subject "Subprocessor updates".
Subprocessors
| Subprocessor | What it does for us | Personal information involved | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, content delivery, database storage, backups, sending email | All information held in the Service | United States (us-east-1) |
| Stripe, Inc. | Card payments, subscriptions and invoices | Organization name, billing email address, purchase history | United States |
| MX Route | Receiving DMARC reports for mail-defense customers, and the emails customers send to verify a domain | DMARC aggregate and failure reports; domain verification emails | United States |
| Google LLC (Google Fonts) | Serving the fonts on our web pages | Visitor IP address | United States |
| Nic Mulvaney Ltd (Cabin) | Privacy-focused website analytics, without cookies or identifiers | Visitor IP address, used in memory only to find the country and not stored | Ireland (EU); company registered in the United Kingdom |
Others who receive information
These organizations are not our subprocessors. They run independent services the Service relies on, and use what they receive under their own terms.
| Recipient | When | What they receive |
|---|---|---|
| Blocklist operators | When a block request is approved | The domain name, the evidence we hold about it, and the requesting customer's organization name |
| Registrars and hosting providers | Only when we pursue a takedown | The domain name and the evidence of abuse |
| Blocklist lookup, WHOIS and DNS services | When we check a domain name | The domain name, or an IP address it points to |