The full processor chain, in one page. Vendor, purpose, region, DPA status. Updated within 14 days of any change. Pre-contract DPA available on request.
The full list of third parties that process customer data on our behalf. No silent additions, no unnamed partners.
| Vendor | Purpose | Region | DPA status |
|---|---|---|---|
| Amazon Web Services | Primary infrastructure (US regions) | US | Standard DPA + BAA |
| Google Cloud Platform | Secondary compute, data warehouse | US / EU | Standard DPA + BAA |
| Cloudflare | Edge, DDoS, WAF | Global | Standard DPA |
| Datadog | Application observability | US | Standard DPA |
| Sentry | Error monitoring | US | Standard DPA |
| Resend | Transactional email | US | Standard DPA |
| Stripe | Billing and payment processing | US | Standard DPA |
| Twilio | SMS delivery, MFA | US | Standard DPA |
Last reviewed with this page publication. Subprocessor additions and removals are announced within 14 days of the change.
Additions, removals, and material scope changes to any subprocessor are posted within 14 days. Enterprise customers receive the change on a dedicated notification list. Procurement teams can subscribe on request.
Our DPA structure is published at /legal/dpa. A signed, executable version is available pre-contract via privacy@elitesgen.com.
SOC 2 Type II reports will be shareable under mutual NDA once issued (ETA 2026 Q3). Interim control attestations and third-party pen test reports are available today through the same process.
Request accessPrimary data residency is US. EU residency is available on Enterprise engagements. Cross-border transfers, where unavoidable, execute under Standard Contractual Clauses with documented transfer impact assessments.
Elitesgen, Inc. is wholly owned by Elites Generation Foundation, a 501(c)(3) whose charter legally forbids behavioral advertising and the sale of individual user data.
We answer DPA, SCC, and subprocessor questions in writing within two business days. Custom terms reviewed inside an Order Form cycle.