Subprocessors
The third parties that process customer data for SimpleSign365.
Last updated 22 October 2026
Each organisation is stored in one place only, the EU (West Europe) or the US (Central US), chosen once at first sign-in and never moved. Providers that act for an organisation work in that place. See the Privacy Policy for details.
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting, database, file storage, logging and monitoring. The seal key is held in a hardware-backed key vault in the EU. | West Europe (EU) or Central US (US), as the organisation chose |
| Microsoft 365 | Sign-in, and sending signing emails from the sender's mailbox | Where the customer's Microsoft 365 is hosted |
| Lettermint | System email (backup sender, notifications) for EU organisations | EU |
| Resend | System email (backup sender, notifications) for US organisations | US |
| Timestamp authority (DigiCert) | Trusted timestamp on signed PDFs. Receives only a hash of the document, no content or personal data. | Global service |
| Paddle.com Market Ltd | Payments, invoices and sales tax for paid plans, as reseller (merchant of record), once billing starts | United Kingdom |
We update this list when it changes. Questions: [email protected].