To provide high-performance email delivery, automated warmup, dedicated IP routing, and secure infrastructure, TuruMail partners with industry-leading third-party service providers ("Sub-processors").
Sub-processor Governance: In accordance with Article 28 of the GDPR and our Data Processing Agreement (DPA), TuruMail maintains this public list of third-party vendors authorized to process customer data or host platform infrastructure. Each vendor undergoes rigorous security and privacy due diligence.
| Sub-processor Name | Purpose | Location |
|---|---|---|
| OVHcloud | Dedicated Servers & Core Infrastructure | 🌐 US, Canada, UK |
| DigitalOcean | Application Hosting & Cloud Infrastructure | 🌐 US, UK |
| Amazon Web Services (AWS) | Cloud Computing & Backups | 🌐 US, Canada, UK |
| Google LLC (Analytics) | Website Performance Tracking | 🌐 Global / US |
| Meta Platforms, Inc. | Marketing & Conversion Tracking | 🌐 Global / US |
| Cloudflare | DNS, CDN & Web Security | 🌐 Global |
| PayPal & Razorpay | Secure Payment Processing | 🌐 Global |
We provide enterprise customers with at least 30 days' advance notice prior to engaging any new sub-processor. Notices are sent via email or announced in our platform dashboard, providing controllers the opportunity to review or object as outlined in our DPA.
Before onboarding any sub-processor, our security team evaluates their data protection safeguards, encryption capabilities (AES-256 / TLS 1.3), independent security audits (SOC 2, ISO 27001), and compliance with European Standard Contractual Clauses (SCCs).