Sub-Processor List
The following third parties process data on PerkSpring's behalf. This list is maintained per MVSP Control 4.3.
Last Updated: September 4, 2026
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Amazon Web Services | Application hosting, database, monitoring (App Runner, RDS, ECR, S3, CloudWatch, Lambda, SES) | SHA-256 hashed emails, org data, API keys (hashed), application logs, request metadata | US West (us-west-2) | View DPA |
| Clerk | Authentication & identity | User email, name, session data | US (Cloudflare) | View DPA |
| Cloudflare | DNS, CDN, WAF, DDoS protection | Request metadata, IP addresses (transient) | Global edge network | View DPA |
Data Handling
PerkSpring does not share, sell, or transfer plaintext email addresses. All member data is stored exclusively as salted SHA-256 hashes.
Sub-Processor Changes
PerkSpring will notify customers at least 30 days before adding a new sub-processor.
To object to a new sub-processor, contact [email protected].