This page lists the third-party Sub-processors engaged by Xirsys, LLC (“Xirsys”) to support delivery of the Services.
Xirsys imposes equivalent data protection obligations on all Sub-processors and remains responsible for their
performance under the Data Processing Agreement (“DPA”).
Xirsys will provide notice of material changes to this list in accordance with the DPA.
A) Cloud & Infrastructure
Sub-processor
Service / Purpose
Typical Data Processed
Primary Processing Regions
Amazon Web Services (AWS)
Cloud compute, networking, and network nodes
Live, on-the-wire, end-to-end encrypted media relayed through our STUN/TURN infrastructure.
As configured by Xirsys (global)
DigitalOcean
Cloud compute and network nodes
Same as above
As configured by Xirsys (global)
Hivelocity
Cloud compute and network nodes
Same as above
As configured by Xirsys (global)
AWS Route 53
DNS and uptime/health monitoring for APIs
Service telemetry/availability data; no content
Global (AWS edge)
DigitalOcean
Cloud compute and storage
Client account identifiers and operational metadata (no WebRTC media content storage)
As configured by Xirsys (global)
B) Payments & Billing
Sub-processor
Service / Purpose
Typical Data Processed
Notes
Stripe, Inc.
Payment processing
Billing details, card data (tokenized)
Xirsys does not store full card numbers
C) Customer Support / Ticketing
Sub-processor
Service / Purpose
Typical Data Processed
Notes
Intercom
In-product messaging and support; product analytics
Client contact information, support communications, usage metadata
Used for customer support
Zendesk
Support ticketing / helpdesk
Client contact information, ticket content
Used for customer support
D) Analytics & Metrics (non-service content)
Sub-processor
Service / Purpose
Typical Data Processed
Notes
Google Analytics
Website analytics (www.xirsys.com only; not TURN/STUN service traffic)
Cookie/session IDs, page metrics
Consumer website only; not applied to service traffic
E) Email / Notifications
Sub-processor
Service / Purpose
Typical Data Processed
Notes
Mailchimp
Marketing emails / notifications
Subscriber email and preference data
Used for communications to subscribers
Additional Information & Commitments
No storage of WebRTC media content: Xirsys relays encrypted WebRTC “Service Traffic” transiently and does not decrypt, inspect, or store communications content.
Notice of changes: Xirsys maintains an updated list of Sub-processors and will notify Customers of material changes consistent with the DPA.
Transfers & safeguards: International data transfers are supported under the EU Standard Contractual Clauses (SCCs) and UK Addendum as described in the SCC Addendum.
Contact: privacy@xirsys.com for Sub-processor inquiries or objections.