Legal

Subprocessors

Third-party service providers Kosansh uses to process personal data in delivering services.

Last reviewed: June 2026. This document is written in plain language. If something is not clear, use the Contact form and choose Security and privacy.

Policy content

About this list

This page lists the third-party service providers (subprocessors) we use when processing personal data on behalf of clients. We update this list when subprocessors are added or removed and notify affected clients in advance of material changes.

Infrastructure and hosting

We use cloud infrastructure providers for hosting our platform and client environments. These providers store data in data centers that meet industry security standards and are bound by data processing agreements.

Analytics

We use privacy-respecting analytics providers that process aggregated, de-identified usage data. These providers do not create individual behavioral profiles and operate under strict data processing agreements.

Communications

Where we send transactional notifications (such as form submission confirmations), we use providers who process minimal personal data, operate under data processing agreements, and do not use that data for their own marketing purposes.

Requesting the current list

Clients who require the current detailed subprocessor list for compliance or audit purposes should use the Contact form and choose Security and privacy. We will provide the current list with names, countries of operation, and processing purposes.

Changes and notifications

We publish changes to this page when subprocessors are added or removed. Enterprise clients with active services agreements receive advance notification of changes and a reasonable objection period as specified in the DPA.

Other legal documents

DPA

Data processing addendum for enterprise clients.