Legal
Subprocessors
Last updated: July 2026
To run the Service, we use a small number of third-party providers that may process personal data on our behalf ("subprocessors"). We require each of them to protect the data and to use it only to provide their service to us. This page lists the categories of subprocessors we use.
Current subprocessors
| Provider | What they do | Data involved |
|---|---|---|
| Stripe, Inc. | Payment gateway: collects and processes card and bank payments. Certified to PCI DSS Level 1. | Payment method tokens and transaction details. Full card numbers are held by the gateway, not by us. |
| Cloud infrastructure provider | Hosting, compute, storage, and backups for the Service. A reputable provider operating audited data centers. Named in our security overview, available under NDA. | All Service data at rest and in transit, encrypted. |
| Email delivery provider | Sends transactional email from yRecurring, such as sign-in and account notices. Note: for email to your own customers, you may configure your own mail server, in which case that provider is yours, not ours. | Recipient email address and message content. |
Changes
We may add or replace subprocessors as the Service evolves. When we do, we will update this page. If you have a data processing agreement with us that includes advance notice of new subprocessors, we will follow it. To be notified of changes, write to [email protected].
Questions
For the full subprocessor detail during a vendor review, request our security overview through the contact page.