Sub-Processor List
Last updated: May 2026
The following third-party sub-processors are engaged by Erkmo Inc. to assist in the delivery of our Service. This list is maintained in accordance with our Data Processing Agreement.
| Name | Purpose | Data Processed | Location |
|---|---|---|---|
| Tinybird | Analytics event storage (shared instance) | Anonymized events (no IP, no user-agent) | EU / US |
| MaxMind | GeoIP database | None — local database, no external API calls | N/A (local) |
| ip-api.com | GeoIP fallback lookup | IP address (transient, not stored by Erkmo) | Germany |
| IPregistry | Company identification from IP network registration data | IP address (transient, not stored by Erkmo alongside the result) | US / EU |
| IPinfo | Company identification fallback (ASN data) | IP address (transient, not stored by Erkmo alongside the result) | US |
| Cloudflare (R2) | Event log backup | Anonymized event payloads | US |
| Stripe | Payment processing | Billing data, card tokens | US |
| Enigma Vault | PCI-compliant card tokenization | Payment card tokens | US |
| Mailgun | Transactional & marketing email | Email addresses, email content | US / EU |
| Vercel | Application hosting & serverless compute | Application data | US |
| PostHog | Internal product analytics (Erkmo's own usage) | Erkmo user behavior (not client visitor data) | US |
BYOD clients: Clients who use their own Tinybird or ClickHouse instance have a reduced sub-processor footprint — Erkmo may not process their analytics data at all in direct mode.
We provide 30 days’ notice before adding new sub-processors. Changes are communicated via email and posted to this page. If you have questions or wish to object to a sub-processor change, contact legal@erkmo.com.