Skip to content

Sub-processor Names

Current as of 13 March 2026. Updated when sub-processors are added or removed.


Sub-processor Purpose Data Processed Location
Cloudflare, Inc. Edge compute, DNS, CDN, D1 database, R2 storage All request metadata, stored data Global (edge), US (control plane)
Twilio Inc. SMS verification, voice services Mobile numbers, SMS content US
Google Workspace Email delivery (SMTP) Email addresses, email content US
GitHub, Inc. Source code hosting No personal data US
Stripe, Inc. Payment processing Payment details, billing address US

Sub-processor Change Policy

UCCA will update this page when sub-processors are added, removed, or materially change their data processing scope. Contacts at Trust Level 2 or above may request notification of sub-processor changes by contacting privacy@ucca.online.

Detailed Data Processing Agreements (redacted) are available at Trust Level 2.


Version History

Version Date Change Author
1.0 2026-03-13 Initial publication UCCA INC