Sub-processors

What is a sub-processor?

A “sub-processor” is a third-party service that PrimeBase relies on to deliver part of the product. When you use PrimeBase, your data may be processed by one or more of the sub-processors listed below — for example, your records are stored on infrastructure we run on Google Cloud Platform, and transactional emails are sent through Postmark.

Each sub-processor is bound by its own contractual security and data-protection terms. We keep this list short on purpose and review every addition before it ships.

Current sub-processors

The list above covers sub-processors that may process customer content or personal data. Tools we use internally that do not touch customer data (e.g. CI runners, code repositories, internal documentation) are not listed.

Optional integrations you control

These are not sub-processors we automatically share your data with. They only receive data when you, as a workspace admin, explicitly connect them. Connecting them creates a separate relationship between you and the third party, governed by their terms.

• Google (Calendar & Gmail send) — when you connect a Google account to sync calendar events or send email from inside PrimeBase. See our Google API services section in the Privacy Policy.
• Microsoft (Outlook calendar) — when you connect a Microsoft account to sync calendar events.

You can disconnect any optional integration from your integration settings at any time. Doing so stops further sharing immediately.

How we vet sub-processors

Before we add a new sub-processor, we review:

• What data they would process and whether the data flow is necessary for the feature.
• Their security posture — published certifications, encryption-in-transit and at-rest practices, and breach-notification commitments.
• Their data-protection terms — do they offer a DPA, do they support the regions our customers need, do they prohibit training on customer content (for AI providers).
• Whether we can revoke access — can we cut the integration and delete the data quickly if we need to.

Notification of changes

When we add a new sub-processor that processes customer content, we update this page and bump the “Last updated” date at the top. For material changes (a new vendor that handles a significant share of customer data), we'll also notify workspace admins by email.

Contact us

Sub-processor questions, DPA requests, or anything else trust-related — email support@primebase.io. A real human reads it and we aim to respond within one business day.

• Email us anything · support@primebase.io