Skip to content
Who Sees What

Digadop Sub-processors

Effective Date: June 27, 2026

This page lists the sub-processors that Stony Point, Inc., a Florida corporation, doing business as (“d/b/a”) Digadop (“Digadop,” “we,” “us,” or “our”), engages to process personal data in connection with providing the Digadop Services. A “sub-processor” is a third party we engage to process personal data on our behalf. This page is maintained as a living document and is kept aligned with Annex III of the Digadop Data Processing Addendum (the “DPA”).

Current sub-processors

NamePurposeLocationData processed
Amazon Web Services, Inc.Cloud infrastructure: compute (Elastic Beanstalk), database (RDS PostgreSQL), key management (KMS), storage and content delivery (S3 and CloudFront), transactional email (Amazon SES), and AI model inference via AWS Bedrock (for Digadop’s AI products only).United States (AWS us-east-1)All categories of customer data and account data processed by the Services, including access-configuration metadata, user-directory data, encrypted credentials, telemetry, and, for AI products only, the content sent for model inference.
GitHub, Inc. (a Microsoft company)In-product feedback and issue logging (issues created from the in-product assistant) for product triage and support.United StatesFeedback context: organization and user identifiers, the identifiers of any audited object or record, application version, last client-side error, user-agent, IP address, and the free text you submit.
esm.shContent-delivery network that serves front-end framework code to the browser at runtime when the application loads.United States and global (CDN)The browser’s IP address and user-agent on application load. No customer Salesforce data is sent to esm.sh.

We do not use analytics, advertising, or session-replay vendors. AI model providers are accessed only through AWS Bedrock. The Who Sees What access audit uses no AI; its optional in-product assistant (“Horton”) uses AWS Bedrock solely to answer typed product questions from public documentation, and never receives your Connected Org data.

How we notify customers of changes

We may add or replace sub-processors as the Services evolve. Before a new sub-processor begins processing personal data, we provide customers at least 30 days advance notice by (a) emailing the customer’s designated privacy or legal contact and (b) updating this page at whoseeswhat.com/legal/sub-processors. A customer may object on reasonable data-protection grounds. If we cannot resolve a timely objection within 30 days, the customer may terminate the affected Service on 30 days notice without penalty, which is the customer’s sole remedy for the change.

Contact

Questions about our sub-processors can be sent to privacy@digadop.com.

Stony Point, Inc., doing business as Digadop 8742 Peachtree Park Ct, Windermere, FL 34786, USA

Last updated: June 27, 2026


© 2026 Stony Point, Inc. d/b/a Digadop. Effective Date: June 27, 2026. Version 1.0.