すべての法的文書は英語版のみで提供しており、法的拘束力を持つのは英語版のみです。
Google 翻訳で翻訳する新しいタブで開きます。参考情報としてご利用くださいSub-processors
The service providers that process personal data for the Agined Attestor service, what each does and where, and how we give notice of changes.
Last updated November 7, 2026.
1. What this page is#
The service providers that process personal data for the Agined Attestor service on behalf of Avonao, Inc.. This list is the sub-processor list referred to in the Data Processing Addendum that forms part of the Terms of Service.
In plain language: these are the companies that help us run the Service and handle some of your data. We tell account owners 30 days before we add one.
2. Current sub-processors#
| Provider | Purpose | Location | Personal data involved | Safeguards |
|---|
| Cloudflare, Inc. | Hosting and compute (Workers), databases and key-value storage, object storage (R2, including the SBOMs that sbom.notarize keeps for ten years when you ask for escrow, in a bucket in the workspace's region locked against deletion for those ten years), CDN, DNS, DDoS protection, and the Cloudflare Email service we send transactional email through | Workspace data (watches, quota, and receipts on the Free to Team plans) stored and processed in the workspace's chosen region: US West, US East, Europe Central, Europe West, Europe North, Asia-Pacific or Oceania; the three European regions under Cloudflare's EU jurisdiction (the data stays in the EU; Cloudflare chooses the datacenter). Account data, sign-in, billing records and dashboard: the region the customer chose at sign-up (plus the global edge network for request termination). The public website and documentation (no customer data): United States (US West). See Data regions. | Account data, credentials, receipts and watches, security audit log, operational logs, email address and message content. For the tools: salted subject hashes and the per-workspace salt, passkey public keys and labels of approvers, device public keys, third-party credentials and webhook secrets (stored sealed), and, for mail received at an Agined-hosted address through Cloudflare Email Routing, the message while it is hashed (only its hash, the envelope sender's hash and the DKIM verdicts are kept); and an escrowed SBOM, which can name the people or suppliers it lists |
Avonao Billing is Avonao's central billing service. Stripe is the merchant of record for payments processed through it. Checkout and the billing portal are Avonao Billing's, and card data is entered there only. We never receive your card number.
You buy and manage your plan in Avonao Billing, which Avonao, Inc. operates. It passes your purchase to Stripe, the merchant of record, and tells the Service your plan, status and renewal date. Avonao, Inc. is the centralized billing entity; Agined has no payment account of its own.
We have no other sub-processors, and we use no sub-processor for advertising or data resale. Our affiliates do not process the Service's personal data.
Some tools fetch public information to observe or check it. The services below receive a request from us for public data, such as a domain name, a package name or a randomness round. We send them no Customer Personal Data, so they are not sub-processors, but we list them so you can see where requests go.
| Source | Used by | What we ask for |
|---|
Public DNS resolvers (Cloudflare 1.1.1.1 and cloudflare-dns.com, and the resolvers you choose for a watch) | dns.watch, email.dkim_notarize, inbound.receipt, control.snapshot, posture.watch | DNS records for the name being checked |
| IANA RDAP bootstrap and the domain's RDAP registry | rdap.watch |
The destination of a relayed call or a webhook delivery is chosen by you and receives what you send it; it is your recipient, not our sub-processor.
2.2 Identity provider#
| Provider | Purpose | Location | Personal data involved | Safeguards |
|---|
| Avonao ID (operated by Avonao, Inc.) | Sole identity provider for sign-up and sign-in to the Service; the Service holds no sign-in methods of its own. Whatever sign-in methods you use at Avonao ID (including any third-party account you connect there), it, not the Service, receives and keeps them. It collects and keeps your email addresses, name, sign-in methods, security log, country and age confirmation (minimum age 16) | The data region of the member's Avonao ID account (one of seven), with some records in its home region, US West. Avonao ID is only an identity provider: it holds no Agined customer data other than the platform connection and, if reported, the plan tier (free/paid) | To the Service: your Avonao ID identifier, confirmed email address, name and language (and an earlier user id if your account was migrated). From the Service: whether your subscription is none, free or paid, its renewal date and a link to manage it; no prices or billing data | Both are operated by Avonao, Inc.; the transfer safeguards for data in each service are in the privacy policies of the Service and of Avonao ID |
Avonao ID is an independent controller for the account data it holds. It is not our processor for that data, and it processes no Customer Personal Data for the Service. Avonao ID's own service providers are named in its privacy policy (Cloudflare and Microsoft 365 are live; Stripe, Google and analytics and monitoring tools are marked Planned). They are not listed in section 2 unless they also process Customer Personal Data for the Service.
3. Changes to this list#
We authorize these sub-processors generally, and we may add or replace one. The process is:
- Notice. At least 30 days before a new sub-processor starts processing personal data, we email the owners of every workspace and publish the change on this page with the new date at the top.
- Objection. If you have reasonable data protection grounds, you may object within that period by writing to privacy@agined.com. We then try in good faith to avoid using the new sub-processor for your data. If we cannot, you may terminate the affected service before the change takes effect and we will refund the unused part of any prepaid fees for it.
- Urgent replacement. If we must replace a provider immediately for security or continuity reasons, we do so with the same protections, and we notify workspace owners as soon as we can and give the same right to object.
Our obligations to our sub-processors mirror our obligations to you, and we stay responsible for them.
