How We Manage Sub-Processors
Aevum News acts as a Data Controller for most personal data collected through our website and services. Where third parties process data on our instructions, they are classified as Data Processors or Joint Controllers, depending on the service.
Registered Sub-Processors
| Sub-Processor | Primary Function | Jurisdiction | Data Categories | Safeguards | Privacy Policy |
|---|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure & hosting | US EU | Device IDs, IP addresses, usage logs, account metadata | SOC 2 Type II, ISO 27001, SCCs, Encryption at rest & in transit | View Policy |
| Cloudflare, Inc. | CDN, DDoS protection, WAF | US | IP addresses, request headers, performance telemetry | SCCs, SOC 2, Automated data minimization | View Policy |
| Plausible Analytics | Privacy-first website analytics | EU | Page views, referrer data, country/city (aggregated), device type | No cookies, GDPR compliant, Data resides in EU | View Policy |
| SendGrid (Twilio) | Transactional & newsletter email delivery | US | Email addresses, open/click metrics, subscription preferences | SOC 2, SCCs, Double opt-in enforcement | View Policy |
| Stripe, Inc. | Payment processing & subscription billing | Global | Billing details, transaction history, payment method tokens | PCI-DSS Level 1, SOC 2, Tokenization, SCCs | View Policy |
| Auth0 (Okta) | Identity & access management | US EU | Authentication tokens, session data, MFA records | SOC 2 Type II, ISO 27001, SCGs, Zero-trust architecture | View Policy |
| Fastly, Inc. | Edge computing & real-time media delivery | Global | Cache keys, request routing data, temporary session tokens | SOC 2, SCCs, Automated 24-hour log expiration | View Policy |
Changes to Sub-Processors
We may add, replace, or remove sub-processors as our technical and operational needs evolve. Where a change materially affects your data processing:
- We will provide at least 30 days' prior notice via email and an updated notice on this page.
- You may object to the transfer of your data to a new processor by contacting our DPO or unsubscribing from affected services.
- Continued use of Aevum News services after the notice period constitutes consent to the updated processing arrangements.
📅 Last Updated
This sub-processor list was last reviewed and updated on October 24, 2025.
Version: 4.2 | Next scheduled audit: January 2026
Data Protection Contact
For inquiries regarding sub-processors, data processing agreements, or to exercise your rights under GDPR/CCPA:
🔒 Data Protection Officer
Email: dpo@aeumnews.com
Portal: Submit a DSR Request
Response Time: Within 30 calendar days
📜 Legal & Compliance
Email: legal@aeumnews.com
Address: Aevum News Ltd., Data Privacy Office, 42 Media Lane, London EC1A 4HQ, UK
Regulator: Information Commissioner's Office (ICO)