Sub-processors
The transparent register of third parties authorized to process customer personal data for Binnovy services, and the controls governing changes to that register.
01What this page covers
A sub-processor is a third party engaged by Binnovy to process personal data on behalf of a customer where Binnovy itself acts as processor or sub-processor. Not every supplier is a sub-processor: a supplier is included here only when its role involves processing Customer Personal Data within the scope of the DPA.
02Approval standard
Before a sub-processor is authorized for Customer Personal Data, Binnovy evaluates the service purpose, data scope, security, confidentiality, privacy terms, processing locations, transfer requirements, incident obligations and other risks proportionate to the engagement. The vendor must be subject to a written agreement containing appropriate data-protection obligations before processing begins.
03Current sub-processor register
The live register below is intended to be generated from Binnovy’s approved production vendor inventory. Each active entry must identify the legal entity, service/purpose, categories of processing, principal processing location(s), and the transfer or residency basis where relevant. No unverified vendor should be published, and no vendor should process Customer Personal Data before approval and registration.
| Sub-processor legal name | Service / purpose | Personal-data role | Processing location(s) | Transfer / residency basis | Status / notice date |
|---|---|---|---|---|---|
| Alibaba Cloud Inc Singapore LTD | Cloud hosting infrastructure | Sub-processor — infrastructure hosting | Singapore | Approved contractual clauses | Active · 15 August 2026 |
| Alibaba Cloud Inc Singapore LTD | Transactional email delivery (DirectMail) | Sub-processor — email delivery, recipient addresses | Singapore | Approved contractual clauses | Active · 15 August 2026 |
04Notice of changes
Where the DPA or applicable law requires notice, Binnovy will give customers advance notice before a material new or replacement sub-processor begins processing Customer Personal Data. The notice period and delivery mechanism may be specified in the commercial agreement or customer administration channel.
05Customer objections
A customer may raise a reasonable, documented objection to a proposed sub-processor on data-protection grounds within the applicable notice period. Binnovy will review the objection in good faith and may offer a technically and commercially reasonable alternative, configuration or other mitigation where available. If no reasonable resolution is available, the parties will follow the termination or remedy provisions of the applicable commercial agreement.
06Customer-specific and sovereign deployments
Some deployments may use a customer-selected provider, a dedicated region, an in-country provider, a private environment or an isolated/air-gapped architecture. The applicable order form or deployment schedule controls if it differs from the general public register. Binnovy will not claim that a deployment has no sub-processors or remains within a specified boundary unless that statement has been verified for the actual architecture.
07Contact
Questions or objections concerning sub-processors may be submitted through /contact and marked "Sub-processors / Data Protection".
Request the itemized sub-processor list through the contact page.