Sub-processors
Last updated: April 16, 2026 · Version 1
Perpetual Software LLC ("Perpetual") engages the sub-processors listed below to support the delivery of the hosted Pad service at app.getpad.dev. Each sub-processor is bound by a data processing agreement that requires it to protect your data at least as strictly as we do. This list is maintained as required by Article 28 GDPR and our Data Processing Agreement.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, tax calculation | Name, email, billing address, payment card (never seen by us), Stripe customer ID | United States (EU-US DPF certified) |
| Maileroo Ltd. | Transactional email (password resets, workspace invitations, receipts) | Recipient email address, email subject and body, delivery metadata | United Kingdom / European Union |
| GitHub, Inc. | Optional "Sign in with GitHub" OAuth identity provider | GitHub username, verified email, avatar URL (only for users who choose GitHub sign-in) | United States (EU-US DPF certified) |
| Google LLC | Optional "Sign in with Google" OAuth identity provider | Verified Google email, display name, avatar URL (only for users who choose Google sign-in) | United States (EU-US DPF certified) |
| Vercel, Inc. | Hosting of the marketing site at getpad.dev (not app.getpad.dev) | Server logs, IP address, user agent (for requests to getpad.dev only) | United States (EU-US DPF certified) |
| Resend, Inc. | Marketing-site waitlist (audience storage and team notification email for getpad.dev signups) | Email address (only for visitors who voluntarily submit the waitlist form) | United States |
| Hivelocity, Inc. | Runs the pad + pad-cloud containers and the PostgreSQL database that stores your workspace content | All account and workspace content described in our Privacy Policy | United States |
Transfer mechanism
Where a sub-processor is located outside the EEA, UK, or Switzerland, transfers are covered by one or more of: (a) the EU-US Data Privacy Framework (and its UK Extension / Swiss-US DPF), where the sub-processor is a certified participant; (b) the European Commission's Standard Contractual Clauses (2021/914); and/or (c) the UK International Data Transfer Addendum.
Notification of changes
Before engaging a new sub-processor that will handle personal data on our behalf, we will update this page. Business customers on a Data Processing Agreement may, in addition, subscribe to receive email notice of sub-processor changes by emailing [email protected] with the subject line "Subscribe: sub-processor changes". Under our DPA, customers may object to a new sub-processor on reasonable data-protection grounds before it is engaged.
Contact
Perpetual Software LLCAttn: Privacy
Massachusetts, United States
[email protected]