Sub-processors

Who else touches your data.

Every third-party service that processes Shakewell Wallet customer data. Updated whenever a sub-processor changes. Last updated June 2026.

Stripe

Purpose
Payment processing
Data processed
Billing data
Location
US / EU
Certifications
PCI DSS Level 1

Amazon Web Services

Purpose
Application hosting
Data processed
All customer data
Location
AU (Sydney) primary, US fallback
Certifications
SOC 2 Type 2, ISO 27001

SendGrid

Purpose
Transactional email
Data processed
Passholder email addresses
Location
US
Certifications
SOC 2

Hosted infrastructure provider for pass signing

Purpose
Pass signing infrastructure
Data processed
Pass content + Apple / Google credentials
Location
Multi-region
Certifications
Available on request

Cloudflare

Purpose
CDN and DDoS protection
Data processed
Request metadata only
Location
Global
Certifications
SOC 2

HubSpot

Purpose
Sales contact data only — not customer data
Data processed
Lead data only
Location
US
Certifications
SOC 2

Google (Analytics, Search Console)

Purpose
Visitor analytics only — not customer data
Data processed
Anonymised website analytics
Location
Global
Certifications
Varies

30 days' notice on changes

We will provide 30 days' written notice (via email and a posted update to this page) before adding any new sub-processor that processes customer personal data.

Subscribe to updates

Want to be notified by email whenever this list changes? Send us your contact address and we'll add you to the notification list.

Subscribe via email →

Questions about our sub-processors? See the Trust Center or email legal@shakewellwallet.com.

Trust + product

Build with the wallet platform your security team can sign off on.

Set up takes minutes. No credit card required to start a free trial.