Subprocessors
Last updated September 28, 2026
CompleteStatus uses the service providers below to run the service. Each one receives only the data it needs for the job listed, and handles it under its own data processing terms. For how we use personal data overall, see our Privacy Policy.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| DigitalOcean, LLC | Hosting: the servers, database, and backups that run CompleteStatus. | All data stored in the service (account, monitoring, billing records, logs). | United States |
| Postmark (ActiveCampaign, LLC) | Delivery of email we send: alerts, reports, sign-in and account email, and invitations. | Recipient email address, email content, and delivery events (for example, bounces). | United States |
| Stripe, Inc. | Payment processing and subscription billing. Only used if you buy a paid plan. | Billing name and email, payment card details (entered directly with Stripe), subscription and invoice records. | United States |
| Google LLC | Optional "Sign in with Google". Google Web Risk threat lists for reputation checks and the free Security Score. | For sign-in: name, email address, Google account identifier. For Google Web Risk: no website addresses (they are checked on our servers against a copy of Google's lists); when an address partly matches a listed entry, a short hash prefix of it (the first bytes of its SHA-256 hash) to confirm the match. | United States |
| Cloudflare, Inc. (Turnstile) | Bot protection on the sign-up, password reset, and waitlist forms, when switched on. | IP address and browser/device signals needed for the check. | Global network; United States company |
| Microsoft Corporation (Microsoft 365) | Our company email, including the support inbox. | Messages you send us and your email address. | United States |
Integrations you connect yourself
If you set up an alert integration — for example Slack, Microsoft Teams, Discord, PagerDuty, Opsgenie, a ticketing tool, or your own webhook — we send the alert content you asked us to send to that destination. We do not choose these services; you do, and they process the data under your own agreement with them. For that reason they are not listed above as our subprocessors.
Public lookups
Some checks look up public information about the domains you monitor, such as certificate transparency logs and domain registration (RDAP) records. These lookups send the domain name only, not information about you.
Changes
We update this page when we add or replace a provider, and change the date above. If your organization needs a data processing agreement, or wants to ask about a provider, email support@completestatus.com.