Sub-Processor List
Last updated: April 13, 2026
Mataki Labs LLC (“AuditStore,” “we,” “us,” or “our”) uses the following third-party sub-processors to process personal data on behalf of our customers in connection with the AuditStore platform and related services. This list is maintained in accordance with the Data Processing Addendum.
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and hosting | All Customer Data (audit events, hash chains, Merkle trees, Ledger metadata, account information, API request logs) | United States (us-east-1, us-west-2) |
| Stripe | Payment processing and billing | Name, email address, billing address, payment method details, transaction history | United States |
| Postmark | Transactional and operational email delivery | Email address, name, email content | United States |
Sub-Processor Details
Amazon Web Services (AWS, Inc.) AWS provides the core infrastructure on which the AuditStore platform operates, including compute (ECS/Fargate), database (RDS PostgreSQL), caching (ElastiCache Redis), key management (KMS), and object storage (S3). All Customer Data, including encrypted audit events, hash chains, and Merkle trees, is stored and processed within the us-east-1 and us-west-2 regions. AWS maintains SOC 2 Type II, ISO 27001, and other industry-standard certifications. Enterprise customers may request custom data residency configurations.
Stripe (Stripe, Inc.) Stripe processes payment transactions and manages billing for AuditStore subscriptions. Stripe receives and processes customer names, email addresses, billing addresses, payment method details, and transaction history. AuditStore does not store full payment card numbers on its own systems. Stripe maintains PCI DSS Level 1 certification.
Postmark (Wildbit LLC) Postmark handles the delivery of transactional and operational emails sent by the AuditStore platform, including account verification emails, password reset emails, billing notifications, usage alerts, and Legal Hold notifications. Postmark processes recipient email addresses, names, and email content.
Change Notification
In accordance with Section 4 of the Data Processing Addendum, AuditStore will provide at least thirty (30) days’ prior written notice before a new sub-processor begins processing personal data. Notification will be provided by updating this page and by email to subscribed customers.
To subscribe to sub-processor change notifications, email dpa@auditstore.dev with the subject line “Sub-Processor Change Notifications.”
If you wish to object to a new sub-processor, you may do so in writing within fifteen (15) days of receiving notice, as described in Section 4.4 of the Data Processing Addendum.
Change Log
| Date | Change |
|---|---|
| April 13, 2026 | Initial sub-processor list published |
Contact
For questions about this sub-processor list or AuditStore’s data processing practices, contact:
- Email: dpa@auditstore.dev
- Legal inquiries: legal@auditstore.dev