{"document":"RealUptime Data Processing Agreement","url":"https://realuptime.io/dpa","version":"1.0","effectiveDate":"2026-08-23","changeNoticeDays":30,"subprocessors":[{"name":"Supabase","service":"Hosts the production PostgreSQL database.","data":"All customer data: accounts and users, monitors and check results, status pages and subscribers, incidents, Errors events, Monitor agent metrics, audit logs, billing references.","location":"United States (AWS us-east-1, Northern Virginia)"},{"name":"Fly.io","service":"Runs the web application, the API and MCP server, and the regional checking probes.","data":"All customer data in transit and in process memory while serving requests; operational request logs; monitor target URLs and probe results.","location":"United States (Ashburn, Chicago, San Jose), Germany (Frankfurt), Japan (Tokyo)"},{"name":"OVHcloud","service":"Operations host: a streaming replica of the production database, the warm standby application, and encrypted local backups.","data":"A replica of all customer data; encrypted backup archives.","location":"United States (Hillsboro, Oregon)"},{"name":"Contabo","service":"Second operations host at an independent provider: a streaming replica of the production database and encrypted backups.","data":"A replica of all customer data; encrypted backup archives.","location":"European Union (Contabo \"Hub Europe\" region)"},{"name":"Cloudflare","service":"DNS for realuptime.io and R2 object storage for offsite database backups.","data":"Offsite backup archives, encrypted before upload so Cloudflare holds ciphertext only.","location":"Cloudflare's global network; R2 backup buckets use Cloudflare's automatic placement and are not pinned to one jurisdiction"},{"name":"Resend","service":"Primary transactional email delivery (sign-in, alert, status-page, and incident messages).","data":"Recipient email addresses and message content, which can include monitor names, incident text, and status-page names.","location":"United States (sends through Amazon SES, us-east-1)"},{"name":"Postmark","service":"Fallback transactional email delivery, used only if Resend is unavailable.","data":"The same as Resend, only while the fallback is active.","location":"United States"},{"name":"Stripe","service":"Subscription billing and payments.","data":"Billing email address, subscription and invoice records. Card details are entered with Stripe directly and never reach RealUptime.","location":"United States"},{"name":"Google Workspace","service":"Company mailboxes, including support@realuptime.io.","data":"Whatever you send us by email: your name, email address, and the content of support, privacy, and legal correspondence.","location":"United States"},{"name":"PagerDuty","service":"Pages RealUptime's own on-call operator when our service is degraded.","data":"Operational alert text about our own systems. No customer records, and customer-configured PagerDuty integrations are the customer's own service, not this one.","location":"United States"}],"vendorsNotProcessingPersonalData":[{"name":"GitHub","service":"Source code hosting and deployment pipeline.","data":"None. Holds our code, not customer records.","location":"United States"},{"name":"Amazon Route 53","service":"Second DNS provider for realuptime.io.","data":"None. DNS records only.","location":"United States"},{"name":"Umami","service":"Aggregate site analytics, served from our own domain.","data":"Page views with no visitor identifier, cookie, or IP-based profile. See the Privacy Policy.","location":"Vendor-hosted; receives no personal data under this agreement"},{"name":"rdap.org","service":"Public domain-registration lookups for domain-expiry monitors.","data":"The domain names you ask us to watch, and nothing else.","location":"Public lookup service"}]}