Subprocessors
The third parties that process customer data for SimpleSign365, what each one does and where it is located. We update this list when it changes.
Last updated 28 October 2026
Each organisation is stored in one place only, the EU (West Europe) or the US (Central US), chosen once when the organisation is created and never moved. Providers that act for an organisation work in that place. See the Privacy Policy for details.
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting, database, file storage, logging and monitoring. The seal key is held in a hardware-backed key vault in the EU. | West Europe (EU) or Central US (US), as the organisation chose |
| Microsoft 365 | Sign-in, and sending signing emails from the sender's mailbox | Where the customer's Microsoft 365 is hosted |
| Lettermint | System email (backup sender, notifications) for EU organisations | EU |
| Resend | System email (backup sender, notifications) for US organisations | US |
| Timestamp authorities (Sectigo, with DigiCert as backup) | Trusted timestamp on signed PDFs. They receive only a hash of the document, no content or personal data. | Global service |
| Cloudflare | Hosting, delivery and protection of this website (not the app or your documents) | Global network |
| Paddle.com Market Ltd | Payments, invoices and sales tax for paid plans, as reseller (merchant of record), once billing starts | United Kingdom |
We update this list when it changes. Questions: [email protected].