Subprocessors
Effective October 29, 2026. Version 2026-10-29.
These are the vendors that may process personal data while providing services to Ordo. Each one works under contract, with confidentiality, security and data protection obligations equivalent to our own. Integrations marked “Enabled by customer” only receive data when a customer connects them to their own workspace.
| Vendor | Purpose | Countries | When |
|---|---|---|---|
| Hostinger International Ltd. | Hosting for application servers, databases and system email delivery | CY / BR | Always |
| Amazon Web Services, Inc. (S3, SES, SNS) | File storage and inbound email processing | US / BR | Always |
| Cloudflare, Inc. (Turnstile) | Bot protection on sign-in screens, the customer portal, the widget and the contact form | US | Always |
| Functional Software, Inc. (Sentry) / GlitchTip | Technical error monitoring, with sensitive data scrubbed | US / EU | Always |
| Google, Apple, Mozilla, Microsoft (Web Push) | Delivery of push notifications to authorized browsers and devices | US | Always |
| Google LLC (Sign in with Google, Google Chat) | Sign in with Google (name, email and photo) and the Google Chat integration | US | Enabled by customer |
| Mobizon (SMS) | SMS reminders and escalations | BR / KZ | Enabled by customer |
| Telegram, Slack (Salesforce) | Bots and notifications in Telegram and Slack | AE / US | Enabled by customer |
| GitHub, Inc. / GitLab Inc. | Syncing tasks with issues, merge requests and pull requests | US | Enabled by customer |
We notify paying customers at least 30 days before adding a new subprocessor, so they can raise a reasoned objection. To receive these notices or request the applicable contractual clauses, write to [email protected].
List last updated October 29, 2026.
This document is also available in Portuguese, English and Spanish. If the versions differ, the Portuguese version prevails.