Sub-processors
Seraph Solutions LLC engages the following third parties to help operate Rispah and its features. Each sub-processor is bound by its provider's standard data-protection terms and processes only the data needed to render its part of the service.
| Sub-processor | Purpose | Data location |
|---|---|---|
| Amazon Web Services (AWS) | Production hosting (Lightsail) and encrypted off-site backups (S3) | US-West-2 (hosting), US-East-2 (backups) |
| Microsoft 365 | Outbound transactional email (account invites, password resets, notification digests) via authenticated SMTP relay | United States |
| Resend | Outbound operational alerts (backup-failure notifications to Seraph Solutions support) | United States |
| Stripe | Payment processing and subscription billing | United States |
Encryption at rest
Customer data stored within Rispah's primary database is encrypted at rest using SQLCipher (AES-256). Off-site backups are additionally Fernet-wrapped (AES-128) with a separate key managed off-host.
Notification of changes
We will update this page when we add, remove, or materially change a sub-processor. Customers under a written Data Processing Agreement may also receive direct notice as required by that agreement.
Contact
Questions about sub-processors or data handling: info@seraphsolutions.tech.