Subprocessors
Last updated: 2026-05-25
This page lists every third-party service that may process personal data on behalf of Uplup customers. We split them into two categories.
1. Core sub-processors
These third parties process data on Uplup's behalf for every customer. They are bound by data processing agreements requiring confidentiality, security, and appropriate data protection.
| Service | Purpose | Location | Data processed |
|---|---|---|---|
| DigitalOcean | Hosting & infrastructure | United States | All customer data at rest + in transit |
| IPQualityScore | Anti-fraud & device risk scoring | United States | Hashed IP + device fingerprint |
| Google Analytics | Product usage analytics | United States | Aggregated usage events (logged-in dashboard only) |
| SendGrid (Twilio) | Transactional email delivery | United States | Recipient email + email body |
| Stripe | Subscription billing + customer-form payment processing | United States | Billing details for Uplup subscriptions; payment + payer details when customers enable Stripe on their forms |
| Cloudflare | CDN + DDoS protection (api.uplup.com) | Global | Request metadata (IP, headers, TLS connection) |
2. Customer-configurable integrations
Uplup customers can choose to connect their forms and quizzes to third-party CRM and marketing platforms. Data only flows to these services if the customer has explicitly enabled the integration. When enabled, form submission data (name, email, phone, and any custom fields the customer configured) is transmitted from Uplup to the chosen platform on the customer's behalf. The customer's relationship with that third-party governs how their data is handled there — Uplup is not a sub-processor for that data flow.
Coming soon (not yet active for production data):
- HubSpot (OAuth — coming soon)
- AWeber (OAuth — coming soon)
- Constant Contact (OAuth — coming soon)
- Salesforce (OAuth — coming soon)
- Pabbly Email Marketing
- Benchmark Email
- Campaigner
- Cordial
- E-goi
- Emma
- Freshworks CRM
- iContact
- Listrak
- Maropost
- Ontraport
- Ortto
- Sailthru
- Selligent
- Vision6
Changes to this list
We update this page whenever a sub-processor or supported integration changes. Material changes to core sub-processors are also announced via in-app banner and email to billing contacts at least 14 days before the change takes effect. Enterprise customers may subscribe to written notification.
Questions
Contact privacy@uplup.com for sub-processor questions, DPA requests, or DPIAs.