This page lists the sub-processors engaged by Blob Engineering Pte. Ltd. ("Superbridge") to process personal data on behalf of its clients, as contemplated by the Superbridge Data Processing Agreement. Superbridge provides at least thirty (30) days' notice of changes to this list in accordance with the DPA.
| Sub-processor | Purpose | Personal data involved | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, managed database, object storage, logging, key management | All categories in DPA Annex I | United States |
| Cloudflare, Inc. | DNS, CDN, TLS termination, WAF, bot mitigation (Turnstile) | IP address, connection metadata | Global edge network |
| TRM Labs, Inc. | Blockchain address risk and sanctions screening | Blockchain addresses | United States |
| Stripe, Inc. | Billing and payment processing | Billing contact details, payment identifiers | United States, Ireland |
| Mailgun Technologies, Inc. | Transactional email delivery | Email address, name, message content | United States |
| Functional Software, Inc. d/b/a Sentry | Application error monitoring on Superbridge-operated properties | Technical and connection data | United States |
Not sub-processors: ZeroShadow address-screening software is deployed and operated by Superbridge within its own isolated infrastructure and does not transmit client personal data to a third party. Public blockchain networks, bridge and interoperability protocols, liquidity sources, wallet providers, and fiat on-ramp providers are not sub-processors. Analytics and monitoring services configured by clients on their own bridge interfaces are the client's own processors, not Superbridge's sub-processors.