Odden Cloud customers put their own business information, and information about the people they deal with, into workspaces. For that information the customer decides what is collected and why, and we process it on their behalf under our data processing addendum. To do that we use the companies below. We choose providers that give contractual commitments to protect the data, and we remain responsible for what they do for us.
Who we use
| Sub-processor | What it does for us | Where | What data it handles |
|---|---|---|---|
| Laravel Holdings Inc., Laravel Cloud | Runs the application and the database for Odden Cloud | United States (US East, Ohio) | All workspace data |
| Laravel Holdings Inc., Laravel Object Storage (built on Cloudflare R2) | Stores uploaded files and the zip files of data exports, privately | Location chosen automatically by the provider (Cloudflare R2); not limited to one region | Uploaded files; export files, for up to 7 days |
| Laravel Holdings Inc., Laravel Nightwatch | Monitors the application for errors and performance | United States (US East, Ohio) | Technical data about requests and errors. Request bodies are not captured, and addresses that carry secrets (invitations, sign-in hand-offs) are kept out |
| Cloudflare, Inc. | Network protection and delivery in front of Odden Cloud | Global network | Technical request data such as IP addresses, and the content of requests while they pass through |
| Amazon Web Services, Inc., Amazon Simple Email Service and Amazon Simple Notification Service | Sends the email a workspace sends through hosted email and Odden's own account emails (password resets, workspace invitations, export and deletion notices), and tells us about bounces, complaints and deliveries | United States (US East, Ohio) | Sender and recipient addresses, the subject and body of messages, delivery results |
Laravel Holdings publishes its data processing agreement and security documents at trust.laravel.com. That is the agreement we rely on for the three Laravel services above.
Not sub-processors
- Paddle.com is the reseller and Merchant of Record for purchases. It is an independent controller of payment and billing information. See its privacy notice.
- Your own AI provider. The AI features use your account and key with the provider you choose, under your agreement with them.
- Your own email server, if you connect one instead of using hosted email.
- Your own DNS provider, if you use a one-click setup for the DNS records of a sending domain: that is your account with them.
Changes
We will add a new sub-processor to this page, and email the owners of every workspace, at least 30 days before it starts to process workspace data. If you object on reasonable data protection grounds within that time, write to support@odden.io and we will work with you to resolve it. If we cannot, you may stop using the affected part of Odden Cloud and we will refund any fees you have prepaid for the period that remains.