Outborn · Privacy
Subprocessors
This page identifies material centrally managed providers that may process personal data on Outborn's behalf. Actual use depends on the product, environment, configuration, and customer-authorized integrations.
| Provider | Purpose | Data | Processing location | When used |
|---|---|---|---|---|
| Railway Corporation | Application, service, database, cache, and infrastructure hosting for centrally deployed Outborn services. | Service data, account/workspace data, logs, metadata, and content stored or transmitted through hosted services. | Singapore for Outborn's primary deployed application/database region unless a product or customer configuration states otherwise. | Core hosting where the relevant Outborn service is deployed on Railway. |
| Google LLC | Google Tag Manager and optional analytics configured on the Outborn company website. | Page visits, interactions, browser/device information, online identifiers, and consent state depending on enabled tags. | As described by Google's applicable data-processing and transfer terms. | Optional website analytics only after the visitor grants analytics consent. Advertising storage and personalization remain denied by the website configuration. |
| Plus Five Five, Inc. (Resend) | External email delivery for Outborn Communication where the Resend provider is enabled. | Sender/recipient details, email content and subject, message identifiers, delivery events, bounce/failure information, and related metadata needed for delivery. | As described by Resend's applicable DPA and subprocessor terms. | Only for services/environments configured to use Resend. Outborn Communication may instead use Outborn infrastructure, SMTP, or another configured provider. |
| Configured SMTP, webhook, AI, identity, storage, or customer-authorized integration provider | Deliver communications or perform a feature explicitly configured by Outborn or authorized by the customer/user. | Only the data and credentials required for the configured integration and permitted scope. | Depends on the selected provider and customer configuration. | Only when that provider or integration is enabled. Customer-selected providers may act independently under their own terms and may not be Outborn subprocessors in every case. |
Subprocessor changes
Where a customer agreement or applicable law requires it, Outborn will provide notice of material additions or replacements through the agreed channel so the customer can assess the change and exercise any contractual rights.
Questions or DPA
Contact [email protected] for product-specific provider details, processing countries, transfer safeguards, or the DPA applicable to your service.