Subprocessors
Effective date: 10 October 2026.
Current subprocessors
| Subprocessor | Purpose | Personal data | Location | Applies to |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge network in front of the Ward control plane and website: DNS, TLS termination, DDoS protection | Connection metadata (IP addresses, request headers) of browsers and administrators connecting to Ward; encrypted request contents in transit | United States and Cloudflare's global edge locations | Ward-operated SaaS only |
| Porkbun LLC | Email forwarding for Valvayn's contact addresses (sales@, security@, privacy@, legal@) | Names and business contact details of people who email Valvayn, and whatever they choose to include | United States | All customers |
Hosting model: Ward-operated: Valvayn hosts the control plane for you. Customer-hosted deployment (the same software on your own infrastructure) is available on request.. Where a customer hosts Ward itself, the hosting subprocessors above do not apply to it.
Services that are not our subprocessors
- Microsoft Entra ID, Microsoft Graph and Intune. Ward connects to the customer’s own Microsoft tenant, using app registrations the customer creates and authorises. Microsoft acts under the customer’s own agreement with Microsoft.
- SIEM and webhook destinations. Alerts are sent only to endpoints the customer configures.
- Browser extension stores (optional, off by default). When the customer enables live store lookups, Ward sends only extension IDs to Microsoft Edge Add-ons and the Chrome Web Store. No personal data is sent.
Changes
We give at least 30 days' notice before adding a subprocessor, as set out in the Data Processing Addendum. To be notified, email [email protected].