Subprocessors
1. About this page
This page lists the third parties — our subprocessors — that may process personal data on our behalf to help us deliver the Services to you. We publish it in the interests of transparency and to meet our obligations under Article 28 of the General Data Protection Regulation (GDPR); it is the current, dated list referred to in our Data Processing Agreement (DPA), and it replaces any older “available on request” approach.
A subprocessor is an organisation that we engage to process personal data contained in your Content or Customer Data, or personal data we hold about you as our Customer, in the course of providing the Services. Before we rely on a subprocessor, and on an ongoing basis, we require each one to commit—by written contract—to data-protection obligations that are equivalent to those set out in our DPA and that meet the standard required by Article 28(4) GDPR. We remain responsible to you for the performance of our subprocessors’ obligations.
In line with our infrastructure commitments, the hosting of Customer Data for the Services and our encrypted backups take place within the European Union / European Economic Area (EU/EEA). We do not transfer hosted service data to third countries. The one exception is Resold Email (see section 3): those mailboxes live in your own Microsoft 365 or Google Workspace tenant, in the region you choose with that provider, and are not on Maxinodes infrastructure.
Last updated: June 16, 2026. We keep this list current and re-date it whenever it changes (see section 4).
2. Our subprocessors
Because some of our supplier arrangements are commercially confidential or still being finalised, the table below describes each subprocessor by category and function rather than by brand name. Each row tells you what the subprocessor does, where the processing takes place, and which parts of the Services it relates to. Where a row applies only to certain Services or options—for example only to Self-Managed Services, only to Managed Services, or only where you have purchased Resold Email—this is stated in the “Applies to” column.
| Subprocessor (category) | Purpose of processing | Location of processing | Applies to |
|---|---|---|---|
| Data-centre & infrastructure operator | Housing and operation of the physical servers, storage and network on which the Services run, including hosting of Customer Data. | Netherlands (EU) | All Services (Self-Managed Services and Managed Services) |
| Encrypted backup storage provider | Storage of encrypted backups of Customer Data to support recovery and resilience. | EU/EEA only | All Services (Self-Managed Services and Managed Services) |
| Payment processor | Handling card and other payments, billing, invoicing and related fraud-prevention checks. Maxinodes does not store full payment-card numbers. | EU | All paid Services (billing & account management) |
| Monitoring & status provider | Uptime and performance monitoring of the Services and communication of incident status via the Status Page. | EU | All Services (operational monitoring) |
| Customer-support / live-chat platform | Handling support conversations and enquiries (including any chat, ticket and contact-form messages and the contact details you provide). | EU (provider being finalised) | All Services (support & communications) |
| Microsoft 365 / Google Workspace | Provision of resold mailboxes and associated productivity services. These mailboxes are hosted in your own tenant and are governed by Microsoft’s or Google’s own terms, data-processing agreements and SLAs — they are not on Maxinodes infrastructure and are not covered by our SLA or our EU-only backup commitment. | The provider region you choose for your tenant | Only where you purchase Resold Email |
Not every subprocessor processes personal data for every Customer. Which subprocessors are involved depends on the Services you order and the options you select — for example, the Resold Email provider is only relevant if you buy Resold Email, and the payment processor is only relevant to the extent you pay us directly through the Client Area.
3. A note on Resold Email
When you purchase Resold Email, Microsoft or Google acts as your service provider in respect of those mailboxes, which sit in your own tenant. We resell the licences but the email service itself does not run on Maxinodes infrastructure. As a result, the personal data processed within those mailboxes is governed by Microsoft’s or Google’s own terms, data-processing agreements and subprocessor lists, and that processing is outside the scope of our SLA and our EU/EEA-only storage and backup commitments. We list Microsoft 365 / Google Workspace above so that the picture is complete, but you should also review your chosen provider’s own documentation for the full list of subprocessors and processing locations that apply to your tenant.
4. Changes to this list
We may add, replace or remove subprocessors as our Services evolve. Where we intend to add or replace a subprocessor that processes personal data on our behalf, we will give you at least 30 days’ notice in advance — by posting an updated, re-dated version of this page and notifying affected Customers through the Client Area and/or by email.
If you reasonably object to a new subprocessor on legitimate data-protection grounds, you may notify us within the notice period and we will work with you in good faith to address your concern, as set out in our Data Processing Agreement. The DPA also explains the rights and remedies available to you if a reasonable objection cannot be resolved.
To be notified of changes to this list, make sure the contact details in your Client Area are up to date. The version in force at any time is the one published at this URL, identified by the version label and “Last updated” date at the top of the page.
Contact
Questions about our subprocessors: privacy@maxinodes.com.
By post: Maxinodes Ltd, 1 Ballycoolin Road, Dublin 15, Ireland.