Subprocessors
Last updated: May 25, 2026
Postscale is operated by DNScale OÜ in Estonia. Primary production service data is hosted in the EU/EEA. Limited network, device, billing, and operational metadata may be processed by the infrastructure providers below under appropriate contractual and transfer safeguards.
Recipient mailbox providers, customer webhook endpoints, customer DNS providers, and open-source software components are not Postscale subprocessors.
| Provider | Purpose | Data Processed | Location | Safeguards |
|---|---|---|---|---|
| Hetzner Online GmbH | Cloud/server hosting for the app, API, PostgreSQL, MX/SMTP processing, monitoring/logging, analytics, and short-retention backup hosts. | Email content and metadata in databases and logs, account data, API data, domains, aliases, webhook metadata, operational logs, and locally stored billing metadata. | Germany / EEA. SMTP, API, CDN, monitoring, and related production nodes are operated on EU infrastructure. | DPA accepted under the DNScale OÜ account. |
| OVHcloud | S3-compatible object storage for inbound attachments and invoice XML. | Inbound attachments, invoice XML, object metadata, and presigned object access metadata. | OVHcloud Object Storage in the EU. | DPA accepted under the DNScale OÜ account. |
| Tailscale Inc. | Private mesh networking, production administration, and ACP anycast edge-to-backend transport between Postscale-operated nodes. | Network, device, configuration, connection, logging, support, relay, and encrypted tunnel traffic metadata. Tailscale is not intended to access email bodies or attachments; service traffic over Tailscale is encrypted in transit. | Global, including the United States and EEA according to Tailscale subprocessor and relay documentation. | DPA accepted under the DNScale OÜ account. Production hosts are configured with the recommended metadata minimization posture and node names do not contain customer identifiers. |
| Vultr / The Constant Company, LLC | ACP edge infrastructure, BGP sessions, anycast routing, and infrastructure administration using DNScale-operated AS/BGP. | Network metadata, IP addresses, ports, route and BGP metadata, edge logs/support metadata, and encrypted or in-transit SMTP/API/CDN traffic metadata. | Vultr infrastructure for ACP edge transport; Postscale SMTP/API/CDN backend nodes run on EU Hetzner infrastructure. | DPA accepted under the DNScale OÜ account. |
| Stripe | Payment processing, subscription billing, customer portal, invoices, and metered usage billing. | Billing contact data, customer/subscription/invoice IDs, payment data, tax data, usage counts, and IP/device metadata depending on the Stripe flow. Stripe is not intended to process email content. | Global / depends on Stripe services and account setup. | DPA accepted under the DNScale OÜ account. |
Additional Infrastructure Disclosures
- Let's Encrypt / ISRG: TLS certificate issuance for Postscale-owned hostnames. Certificate metadata is public through certificate transparency logs.
- Cloudflare DNS-over-HTTPS: Used only by browser-only public DNS lookup tools. DNS queries are sent directly from the user's browser and are not proxied through Postscale servers.
- DNScale-operated DNS: Authoritative DNS for Postscale-controlled hostnames uses DNScale-operated nameservers hosted in the EU.
Changes
We review this register when providers or processing scope changes. Material changes are reflected on this page and handled under the notice terms in the applicable Data Processing Agreement or customer agreement.