Subprocessors
The third parties that may process personal data in delivering the platform.
How this list works
Castis engages the third parties below to help deliver the platform. Each is bound by written terms that impose obligations no less protective than our Data Processing Addendum, and each is assessed before engagement and periodically thereafter.
We will publish any intended addition or replacement here, and notify subscribed customers, at least thirty days before it takes effect. To be notified, write to partner@castis.io.
Infrastructure and hosting
DigitalOcean — application and control plane hosting — Singapore and other regions as configured.
Castis data centre facilities — delivery origin, streaming and on-premise components — Korea and Thailand.
[Any additional cloud or colocation provider used for a specific customer deployment is disclosed in that customer's Annex A.]
Delivery and network
Commercial content delivery networks — used where a customer selects a multi-CDN topology. The specific providers form part of that customer's configuration and are listed in its Annex A.
Communications
Transactional e-mail provider — delivery of account, notification and support e-mail — [provider to confirm].
Push notification services — Apple Push Notification service and Google Firebase Cloud Messaging — delivery of mobile notifications.
Payments
Curlec — payment collection where recurring payment is used in Malaysia.
Payment card data is collected and processed by the payment provider. Castis receives a transaction reference and status only.
Support and operations
Support ticketing and communication tools — handling of customer support correspondence — [providers to confirm].
Error and performance monitoring — diagnostic and crash data from applications — [providers to confirm].
Verification note
This list must be verified against the systems actually in production, and completed where marked, before publication. An inaccurate subprocessor list is itself a compliance failure and is one of the first things an enterprise or government procurement review checks.