# Subprocessors

> Third parties that process personal data on Ward’s behalf, and services Ward connects to on the customer’s instruction that are not subprocessors.

Effective date: 10 October 2026.

## Current subprocessors

| Subprocessor | Purpose | Personal data | Location | Applies to |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge network in front of the Ward control plane and website: DNS, TLS termination, DDoS protection | Connection metadata (IP addresses, request headers) of browsers and administrators connecting to Ward; encrypted request contents in transit | United States and Cloudflare's global edge locations | Ward-operated SaaS only |
| Porkbun LLC | Email forwarding for Valvayn's contact addresses (sales@, security@, privacy@, legal@) | Names and business contact details of people who email Valvayn, and whatever they choose to include | United States | All customers |

Hosting model: Ward-operated: Valvayn hosts the control plane for you. Customer-hosted deployment (the same software on your own infrastructure) is available on request.. Where a customer hosts Ward itself, the hosting subprocessors above do not apply to it.

## Services that are not our subprocessors

- **Microsoft Entra ID, Microsoft Graph and Intune.** Ward connects to the customer’s own Microsoft tenant, using app registrations the customer creates and authorises. Microsoft acts under the customer’s own agreement with Microsoft.
- **SIEM and webhook destinations.** Alerts are sent only to endpoints the customer configures.
- **Browser extension stores (optional, off by default).** When the customer enables live store lookups, Ward sends only extension IDs to Microsoft Edge Add-ons and the Chrome Web Store. No personal data is sent.

## Changes

We give at least 30 days' notice before adding a subprocessor, as set out in the [Data Processing Addendum](https://valvayn.com/legal/dpa/). To be notified, email privacy@valvayn.com.

---

Canonical: https://valvayn.com/legal/subprocessors/ · Markdown: https://valvayn.com/legal/subprocessors.md · Built: 2026-10-10