01What is a subprocessor
A subprocessor is a third-party company that EasyEcom engages to process data on its behalf in the course of delivering the platform: for example, the cloud infrastructure the platform runs on, or the service that delivers a shipment-notification email. Subprocessors act only on our instructions and only to the extent needed to perform their function.
EasyEcom remains responsible for the data we entrust to our subprocessors. Engaging a subprocessor never reduces our obligations to customers under our Privacy Policy, our data processing agreements, or applicable data protection law.
The marketplaces, sales channels, carriers and other systems you choose to connect to your EasyEcom account are integrations you authorize — not subprocessors — and are governed by their own terms and privacy policies.
02How we engage subprocessors
Before a subprocessor is onboarded, we evaluate its security practices, data handling standards and suitability for the specific function it will perform. Once engaged, every subprocessor operates under contractual terms that require it to:
- Protect personal data in a manner consistent with our Privacy Policy and applicable data protection laws
- Process data only as needed to provide the relevant service, on documented instructions
- Maintain appropriate confidentiality, security and breach-notification obligations
- Support our compliance obligations to customers, including under data processing agreements
Access is scoped to the minimum necessary for the function performed, consistent with the least-privilege approach described in our Trust Center.
03Subprocessor categories
EasyEcom uses subprocessors across the following categories:
| Category | Function performed | Data typically involved |
|---|---|---|
| Cloud hosting & infrastructure | Runs the platform, storage and networking, in the data-residency region configured for your account | Platform data, including order, inventory and end-customer data |
| Communication & notification delivery | Sends transactional email, SMS and notifications on the platform's behalf | Contact details and message content |
| Analytics, logging & monitoring | Measures platform performance, detects errors and anomalous activity | Usage, diagnostic and log data |
| Payment processing & reconciliation | Supports billing and settlement workflows (we do not store complete card or financial credentials) | Billing and settlement data |
| Customer support & ticketing | Operates the tooling behind support conversations and requests | Support communications and account context |
| Security, backup & fraud prevention | Provides backup, threat detection and fraud-prevention capabilities | Platform and security telemetry; backup copies |
04Requesting the named list
A current list of named subprocessors — vendor, function and processing region — is available to business customers and to prospects in active evaluation, under NDA where required. Request it through your account manager or by writing to privacy@easyecom.io; it is also included in the documentation pack described in the Trust Center.
05Changes & notifications
Our subprocessor set changes only when there is an operational reason: a new capability, a region expansion, or the replacement of an existing provider. When a material change affects the processing of customer data, we take reasonable steps to inform affected customers in advance where required, through the platform, email, or the terms of the applicable data processing agreement, so they have the opportunity to raise questions or objections before the change takes effect.
06Contact
Questions about our subprocessors, or about how a specific category applies to your data, are welcome.