Onedash uses certain third-party service providers to help provide, operate, secure, and support the Services. Where those providers process Customer Personal Data on behalf of Onedash, they may act as subprocessors. This page identifies the material subprocessors that Onedash uses to process Customer Personal Data in connection with the Services.
Onedash may update this list from time to time as our Services and infrastructure change. Where required under our Data Processing Addendum or applicable law, we will provide notice before appointing a new subprocessor that will process Customer Personal Data.
1. Subprocessors
| Subprocessor | Purpose | Primary Processing Location |
|---|---|---|
| Supabase | Authentication, account management, database services, and storage and processing of applicable service and account data. | Australia |
| OVHcloud | Dedicated server and network infrastructure used by Rubix Host to host the Onedash web application. | Australia |
| Cloudflare | Network security, traffic proxying, content delivery, DDoS protection, and related infrastructure services. | Global |
| Stripe | Payment processing, subscription billing, invoicing, payment method management, fraud prevention, and related financial services. | Global |
| PostHog | Product analytics, usage measurement, diagnostics, and session analysis where enabled within the Services. | United States |
| Google Analytics | Website analytics, usage measurement, traffic analysis, engagement measurement, and related reporting. | Global |
2. Processing Locations
The location shown above identifies the primary location in which Onedash has configured the relevant provider to store or process Customer Personal Data where a regional configuration is available. A provider may use personnel, infrastructure, affiliates, or its own subprocessors in other jurisdictions where permitted under its agreement with Onedash and applicable data protection law.
Onedash's primary Supabase project is configured in Sydney, Australia. Applicable primary project data is therefore stored and primarily processed in that region, subject to Supabase's own infrastructure and subprocessor arrangements. Onedash also operates applicable services on dedicated infrastructure located in Australia and supplied by OVHcloud.
Cloudflare operates a globally distributed network. Where Onedash uses Cloudflare to proxy or protect traffic, request and network information may be processed through Cloudflare infrastructure in multiple jurisdictions.
3. Related Infrastructure
Onedash may operate infrastructure and internal systems directly or through related operations. A related service or internal system is not listed as a separate subprocessor merely because it is used to support Onedash. For example, Rubix Host may be used in connection with Onedash hosting operations. Where Rubix Host is operated by the same legal entity responsible for Onedash, it is not a separate third-party subprocessor.
Domain registration and DNS-related providers are not listed solely because they provide domain registration or DNS services where they do not process Customer Personal Data on behalf of Onedash in connection with providing the Services. Security, secrets-management, key-management, and internal infrastructure software are also not listed solely because Onedash uses them internally. Where such a provider does process Customer Personal Data on behalf of Onedash, it may be added to this list as appropriate.
4. Other Providers
Onedash uses other providers in operating its business, including payment, analytics, advertising, communications, security, domain, and infrastructure providers. A service provider is not included on this page solely because Onedash uses its services. Providers are listed here where they process Customer Personal Data on behalf of Onedash in connection with providing the Services.
Providers that process information for their own purposes, or that are used only for website analytics, advertising, payment processing, domain registration, internal business operations, or infrastructure that does not process Customer Personal Data, may instead be described in our Privacy Policy, Cookie Policy, or other applicable documentation.
5. Policy Updates
Onedash may add, replace, or remove subprocessors as the Services evolve. Where required by our Data Processing Addendum or applicable law, Onedash will provide reasonable advance notice before a new or replacement subprocessor begins processing Customer Personal Data. Where Onedash provides a subprocessor notification service, customers are responsible for maintaining current contact details and subscribing to that notification service if they wish to receive notices through it.
Customers may object to a new subprocessor on reasonable grounds relating specifically to the protection of Customer Personal Data in accordance with the Data Processing Addendum.