Every third party that touches account data. A short list, deliberately.
Version 1.0 · effective 2 August 2026
Hosting for the account, licensing, and hosted-trial services. Processes account records and hosted-trial content.
DNS, TLS termination, and static hosting for the public sites and portals. Processes request metadata such as IP address and user agent, in transit.
Payment processing. Processes billing contact and payment details. Card data never reaches our systems.
Transactional email: sign-in links, trial and billing notices. Processes recipient addresses and message content.
If you choose a cloud model, that relationship is yours and the traffic goes directly from your deployment to that provider. We are not in that path and cannot see it. Fully in-network models are supported for regulated data.
We give at least 30 days notice before adding a sub-processor. Email privacy@factrule.com to join the notification list or to object.
Last updated 2 August 2026. Notification list: privacy@factrule.com