Subprocessors
Who else touches your data.
Last updated 2026-03-22 · v4
This is the complete list of third-party services we use to operate RailRocket. We keep it short on purpose. Org-plan customers receive at least 30 days’ notice before any addition, via section 10 of the Privacy Policy.
Subprocessor
What it does
Where
Transfer basis
Stripe Payments Europe LtdStripe Ireland
Card-on-file storage and subscription billing. Card numbers never reach our servers.
Ireland
(EU/EEA)
EUIntra-EU. No cross-border transfer.
Amazon Web Services EMEA SARLAWS Europe
Primary infrastructure: control plane, workspace runtime, snapshot storage. Frankfurt is the default; Stockholm holds backups.
Frankfurt, DE (primary)
Stockholm (backup)
EUIntra-EU. No cross-border transfer.
ActiveCampaign LLCPostmark (transactional email)
Transactional emails: sign-up verification, billing receipts, password resets, status-page notifications. No marketing.
United States
SCCsEU SCCs (2021/914) in place; transit TLS only.
Plausible Insights OÜPlausible Insights OÜ
Cookie-less, privacy-respecting analytics for the marketing site (railrocket.dev). Not used in the dashboard or workspace pages.
Tallinn, EE
(EU/EEA)
EUIntra-EU. No personal data stored.
Sentry GmbHSentry (Functional Software, Inc.)
Error tracking for the dashboard and control-plane API. Configured to scrub email and token-shaped strings before sending.
United States
SCCsEU SCCs + EU data residency add-on (Sentry EU region).