Sub-Processor Register
Continuity engages carefully vetted infrastructure partners to deliver resilient outbound services. Each Sub-Processor listed below operates under data processing terms consistent with our Data Processing Addendum and is monitored for security posture and contractual compliance.
We provide at least fifteen (15) days advance notice before onboarding a new Sub-Processor or materially changing how one is used. Details on subscribing to notifications and raising objections are outlined in the Notification & Contact section below.
Current Sub-Processors
| Provider | Primary Location(s) | Purpose | Data Categories | Documentation |
|---|---|---|---|---|
| Microsoft Corporation | United States & regional Azure/M365 data centres | Licensed tenant hosting, email delivery, identity and security services | Customer-managed mailbox content, contact metadata, system telemetry | |
| Cloudflare, Inc. | Global network with EU and US PoPs | Edge security, traffic acceleration, DDoS mitigation, DNS management | Encrypted traffic metadata, service logs, DNS queries | |
| Hetzner Online GmbH | Germany & Finland data centres | Compute and storage for monitoring, analytics, and orchestration workloads | Telemetry snapshots, service configuration, encrypted backups (no bulk message content). Sub-Processor list available in DPA Appendix 3. |
Notification Commitments
Change Log
- 2nd of October, 2025: Initial publication of the sub-processor register.
Notification & Contact
Subscribe to sub-processor updates, raise objections, or request historical versions of this register by emailinglegal@withcontinuity.com.
Please include your Continuity account details so we can route the request to the appropriate team.