Sub-processors
This page lists the third-party services that Entropy Lab SRL uses to provide the EntryGuard service. These third parties may process customer personal data on our behalf as Sub-processors under our Data Processing Agreement.
We notify customers at least 30 days in advance of any changes to this list. Customers can subscribe to notifications by emailing [email protected] with the subject "Subprocessor notifications".
Active Sub-processors
| Sub-processor | Purpose | Location | Data processed |
|---|---|---|---|
| Oracle Cloud Infrastructure Oracle Corporation |
Application hosting, database, storage, backups, and transactional email delivery (OCI Email Delivery) | Germany (eu-frankfurt-1) | All customer data including account information, audit logs, encrypted credentials, application data, and email recipient addresses |
| MAIB Moldova Agroindbank S.A. |
Payment processing for card payments and recurring billing | Republic of Moldova | Card tokens, payment amounts, billing contact name and email |
| Cloudflare, Inc. | Content delivery network, DNS, and DDoS protection | Global (primarily EU edge nodes) | IP addresses of website visitors, basic request metadata |
Compliance and Certifications
Our sub-processors maintain industry-standard security certifications:
- Oracle Cloud Infrastructure — ISO 27001, ISO 27017, ISO 27018, SOC 1/2/3, GDPR-compliant. EU data processing addendum signed.
- MAIB — PCI DSS Level 1 compliant.
- Cloudflare — ISO 27001, SOC 2 Type II, GDPR-compliant. EU Standard Contractual Clauses signed where applicable.
Sub-processor Selection
We select Sub-processors based on:
- Security and compliance — relevant certifications (ISO 27001, SOC 2, PCI DSS) and a track record of strong security practices
- Data location — preference for EU/EEA-based providers wherever possible
- Reliability — proven uptime and operational track record
- Privacy commitments — willingness to sign data processing agreements and comply with GDPR
- Necessity — only when the function cannot reasonably be performed in-house
Notification of Changes
We notify customers via:
- Email to billing contacts of paying customers, at least 30 days before the change
- In-app notification for active users
- This page is updated to reflect current Sub-processors
Customers may object to a new Sub-processor on reasonable grounds related to data protection within 30 days of notification, as described in our Data Processing Agreement.
Contact
For questions about Sub-processors or data processing:
Email: [email protected]
Postal address: Entropy Lab SRL, Alba Iulia 21, ap. 33, Chișinău, MD-2051, Republic of Moldova