Sub-processor register
Last updated 2026-05-18
The vendors below are the sub-processors Duress relies on to deliver the workplace safety platform. Any vendor that handles customer personal data appears here. New additions get 30 days' notice via in-product banner and email to designated admins, with the right to object.
Current register
| Vendor | Purpose | Data categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Application hosting, database, object storage | All customer data (telemetry, incident audio/video, identity, audit logs) | AWS Auckland | In-region |
| Cloudflare | Edge CDN, DNS, DDoS mitigation, marketing-site delivery | Visitor IP, headers, public-asset cache (no customer personal data in payload) | Global edge, with region-pinned origins | Standard contractual clauses |
| Twilio | Outbound SMS for alerts, escalations, MFA | Mobile number, alert metadata, dispatch timestamps | EU/US data centres | Standard contractual clauses |
| Auth0 (Okta) | Authentication for Pathfinder admin and Duress app | Email, name, hashed credentials, login records | AU/EU/US (region-pinned per tenant) | In-region where supported |
| Local monitoring partner | 24/7 operator response to active alerts | Live audio, live video, location, incident metadata | New Zealand | In-country (per accreditation requirements) |
| Stripe | Self-serve payments, subscription billing | Billing contact, card token (held by Stripe, not Duress), invoice records | US (PCI DSS Level 1) | Standard contractual clauses |
| HubSpot | Sales CRM, marketing communication preferences | Business contact details, deal pipeline metadata | EU/US data centres | Standard contractual clauses |
| Sentry | Application error monitoring | Stack traces, request metadata, anonymous user IDs | US (EU region available on request) | Standard contractual clauses |
| Datadog | Platform observability, performance monitoring | Performance metrics, anonymised request metadata, system logs | AU / EU / US (region-pinned per tenant) | In-region where supported |
Subscribe to changes
Customer admins are notified automatically. Anyone else can subscribe by emailing trust@duress.com.