Subprocessors
Foundation for Artist Catalogues Inc.
Last Updated: March 1, 2026
Introduction
This page lists the sub-processors engaged by Foundation for Artist Catalogues Inc. to assist in providing our Services. In accordance with our Data Processing Addendum, we maintain this list to provide transparency about third parties that may process customer data.
We will update this page at least 30 days before engaging any new sub-processor or making material changes to existing sub-processors. Customers may object to a new sub-processor on reasonable data protection grounds as described in our Data Processing Addendum.
Current Sub-Processors
Amazon Web Services, Inc. (AWS)
Service: Cloud infrastructure, hosting, data storage, backup, and CDN
Data Location: Regionally hosted — US customers in US East/West regions; EU customers in EU (Frankfurt) or EU (Ireland) regions; Asia Pacific customers in AP regions
Certifications: SOC 2, ISO 27001, PCI DSS
Website: aws.amazon.com | DPA: aws.amazon.com/compliance/gdpr-center
Juicy Orange LLC
Service: Platform development, AWS infrastructure management, technical support
Data Location: United States
Website: juicyorange.com
Backblaze, Inc.
Service: Cloud backup and storage
Data Location: United States
Website: backblaze.com
Cloudflare, Inc.
Service: DNS, CDN, and DDoS protection — network traffic passes through Cloudflare infrastructure
Data Location: Global (distributed network)
Certifications: SOC 2, ISO 27001
Website: cloudflare.com | DPA: cloudflare.com/gdpr/introduction
Docker, Inc.
Service: Container image registry and deployment tooling
Data Location: United States
Website: docker.com
Fly.io
Service: Application hosting and deployment
Data Location: United States (with regional options)
Website: fly.io
Heroku (Salesforce, Inc.)
Service: Application hosting and deployment
Data Location: United States
Certifications: SOC 2, ISO 27001
Website: heroku.com | DPA: salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf
Mailgun Technologies, Inc. (Sinch)
Service: Transactional email delivery, platform notifications, MFA and password reset emails
Data Location: United States
Certifications: SOC 2
Website: mailgun.com | DPA: mailgun.com/gdpr
Notification of Changes
We will notify customers of any new or replacement sub-processors by updating this page at least 30 days before the change takes effect and sending email notification to the address specified in your Service Agreement.
Historical Changes
March 1, 2026 — Initial publication: AWS, Juicy Orange LLC, Backblaze, Cloudflare, Docker, Fly.io, Heroku, Mailgun
Questions?
Email: privacy @ artistcatalogues.org
Mail: Foundation for Artist Catalogues Inc., 242 Main Street, Beacon, New York 12508, United States
Related Documents: Data Processing Addendum · EU Customer Addendum · Master Service Agreement · Privacy Policy