This page lists the types of outside service that can handle personal data when you use SipherMail, what each can receive and where it is located. See also How we protect your data.
Always in use#
| Service type | Purpose | Data involved | Location |
|---|---|---|---|
| Hosting and infrastructure providers | Running SipherMail and storing service data | All service data | Europe |
| Content delivery and network security provider | Delivering our websites and protecting them from attack | Web traffic, including IP addresses | Set by the provider |
| Stripe | Card payments and subscriptions on the web | Billing details, email, plan | Set by the provider |
| In-app purchase management provider, plus the Apple and Google app stores | In-app purchases on iPhone and Android | App user ID, purchase status | Set by each provider |
| Push notification delivery services | Notifications on your phone or browser: platform services run by Apple, Google and browser makers, plus a notification relay | Device or browser push token, notification content | Set by each provider |
| Location lookup service | Showing the approximate place of a sign-in in security alerts | IP address | Set by the provider |
| Sender image and logo services | Showing sender pictures and logos | A hash of the sender’s address, or the sender’s domain | Set by each provider |
Only when you use them#
| Service | Purpose | Data involved |
|---|---|---|
| Google, Microsoft, Yahoo | Importing mail and sending as your address, when you connect that account | Sign-in tokens, mail you choose to import |
| Apple, Google, Microsoft | Signing in with that account | Name and email the provider shares |
| Your DNS provider | Adding DNS records when an organisation admin uses automatic setup, with an API token you provide | The API token you provide, your DNS records |
Sipher AI#
Sipher AI runs on models operated by SipherMail. Your mail is not sent to outside AI providers.
Full list for business customers#
Business customers can ask for the full current list of named sub-processors and their locations through support. The same list is in the data processing agreement.
We update this page when the list changes. Last updated 2 November 2026.