Sub-Processors
Last updated: 28 March 2026
This page lists the third-party sub-processors that Towershift uses to provide the Service. It forms part of our Data Processing Agreement. We will update this page and notify affected organisations at least 14 days before engaging a new sub-processor.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Fly.io | Application hosting and managed PostgreSQL database | All application data | Australia (Sydney) |
| Stripe | Subscription billing and SMS credit purchases | Organisation name, billing email, payment method | United States |
| ClickSend | SMS message delivery | Recipient phone number, message content | Australia |
| Postmark / Mailgun / Amazon SES | Transactional email delivery (provider varies by configuration) | Recipient email address, message content | United States / EU (varies by provider) |
| Cloudflare | Turnstile CAPTCHA verification during registration | IP address, browser metadata | Global (nearest edge) |
| Tigris (via Fly.io) | Object storage for file uploads (skill proof documents) | Uploaded files | Australia (Sydney) |
Changes to this list
When we add or replace a sub-processor, we update this page and notify organisation administrators by email at least 14 days in advance. If you object to a new sub-processor, you may terminate your subscription before the change takes effect.
Contact
For questions about our sub-processors, contact us at privacy@towershift.app.