Sub-processors
Last updated: May 27, 2026
This page lists the third-party sub-processors that Ship Captain engages to process Customer Data on behalf of our customers. As described in our Data Processing Addendum, we impose data protection obligations on all sub-processors that are substantially equivalent to those we undertake.
Change Notifications
We provide at least 30 days' advance notice before adding or replacing a sub-processor. To subscribe to change notifications, email [email protected] with the subject "Subscribe to Sub-processor Changes".
Current Sub-processors
| Sub-processor | Category | Purpose | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Infrastructure | Hosting, storage, compute, and database services for the Ship Captain platform | United States |
| Stripe | Payment Processing | Payment processing, billing, and fraud prevention | United States |
| UPS | Shipping Carrier | Shipping label generation, rate calculation, and package tracking | United States / Global |
| FedEx | Shipping Carrier | Shipping label generation, rate calculation, and package tracking | United States / Global |
| USPS | Shipping Carrier | Shipping label generation, rate calculation, and package tracking | United States |
| DHL | Shipping Carrier | International shipping label generation, rate calculation, and package tracking | Global |
| Intercom | Customer Support | Customer support chat, help center, and ticket management | United States |
| Resend | Email Services | Transactional email delivery for notifications, receipts, and alerts | United States |
| Grafana Labs | Monitoring | Application monitoring, logging, and observability | United States |
| Sentry | Error Tracking | Error monitoring and performance tracking | United States |
Objection Rights
As described in our Data Processing Addendum, you may object to a new sub-processor by notifying us within 14 days of receiving notice. Your objection must be based on reasonable grounds relating to data protection. If we cannot reasonably accommodate your objection, you may terminate the affected services without penalty.
Data Protection Measures
All sub-processors are subject to written agreements that include data protection obligations substantially equivalent to those in our DPA. We regularly review sub-processor compliance and require them to implement appropriate technical and organizational security measures.
International Transfers
When Customer Data is transferred to sub-processors located outside the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and, where applicable, certification under the EU-U.S. Data Privacy Framework.
Questions?
If you have questions about our sub-processors or want to exercise your objection rights, please contact: