Subprocessors
These are the third-party service providers ("subprocessors") that host or deliver Expeal services and, in doing so, process data on our behalf. Each provider processes information only to deliver its service to us — none receives data for advertising or resale, and we use no analytics or data-broker services. The governing descriptions live in the Site Privacy Policy and the Application Privacy Policy (its Section 5).
| Provider | Role | Location | Data handled |
|---|---|---|---|
| Dreamhost | Hosting for this website; mail service for the @expeal.com addresses | United States | Standard server logs for the site; email you send to any @expeal.com address |
| Heroku (Salesforce) | Hosting and database for the Expeal application | United States | Application data: accounts, case answers, and server logs, as described in the Application Privacy Policy |
| Amazon SES (AWS) | Email delivery for the Expeal application (sign-in passcodes, case notices) | United States | Recipient address and message content of application email |
| Stripe | Payment processing, where the application offers a purchase | United States | Payment card details (Stripe-side); Expeal receives transaction records, never full card numbers |
Changes to this list are recorded in the change log below as they happen.
Change log
- 2026-08-18 — Initial publication (Story 1.7.1). The provider set is D7's (Dreamhost, Heroku, Stripe) plus Amazon SES, which the shipped Application Privacy Policy Section 5 already names as the email-delivery provider — the page ships only what the legal set already says.