DPA · Annex III
Subprocessors
The third parties DRIVUNO uses to deliver the service. None of them can read your file contents — they hold ciphertext or operational metadata only.
Notification
We notify Business customers at least 30 days before adding or replacing a subprocessor that processes customer metadata. Subscribe by emailing dpo@drivuno.com.
Infrastructure
Edge runtime, DDoS protection, CDN
Encrypted request bodies, IP addresses (logs)
Global (Anycast)
Production database and object storage holding ciphertext only. Provisioned and administered through our managed cloud control plane.
Account records, ciphertext, sealed key envelopes, audit logs
EU (Ireland)
Immutable off-site backup snapshots (encrypted before upload)
Encrypted snapshot archives only
EU (Amsterdam)
Communications
Billing
Analytics
Privacy-preserving site analytics (no cookies, no PII)
Anonymized request URL, user agent, referrer
EU
For our full Data Processing Agreement, see /dpa. For data-residency commitments, see the sovereignty page.
