> ## Documentation Index
> Fetch the complete documentation index at: https://docs.squid.gg/llms.txt
> Use this file to discover all available pages before exploring further.

# Sub-processor List

> The third-party vendors we use to deliver the service and what data they process.

*Last updated: \[August 27, 2025]*

## **1. Introduction**

Squid Academy uses carefully selected third-party service providers (“Sub-processors”) to support the delivery of our LMS, tournament platform, and related services. These Sub-processors may process personal data on our behalf when providing their services. (For details on our cross-border data protection safeguards, see our [<u>International Data Transfers</u>](https://docs.google.com/document/u/6/d/1CyjvkQlK117ZzibQoIzbA9fgCzVihPBzt1vNClSkgiw/edit) page.)

We conduct due diligence before engaging any Sub-processor and require all Sub-processors to enter into written agreements that impose data protection obligations consistent with our [<u>Data Processing Addendum</u>](https://docs.google.com/document/u/6/d/1IXgzc8vsrTkkPtnwghZ2pHGoR_ZyCeKdo2db0m7dNsw/edit).

## **2. How We Update This List**

* **Advance Notice:** We will update this page at least **30 days before** engaging a new Sub-processor, except where urgent replacement is required (see below).
* **Emergency Replacement:** In urgent cases (e.g., to maintain security, availability, or continuity of service), we may engage a Sub-processor without prior notice. In these cases, we will update this list as soon as reasonably practicable and provide notice promptly.
* **How to Object:** If you are a customer with a current agreement incorporating our [<u>DPA</u>](https://docs.google.com/document/u/6/d/1IXgzc8vsrTkkPtnwghZ2pHGoR_ZyCeKdo2db0m7dNsw/edit), you may object to a new Sub-processor by emailing [<u>privacy@squid.gg</u>](mailto:privacy@squid.gg) within 30 days of notice. Objections must be based on reasonable, documented grounds relating to data protection risks.

## **3. Current Sub-processors**

| Name of Sub-processor | Purpose of Processing                                | Location of Processing                             | Data Categories Processed                         | Transfer Mechanism (if outside EEA/UK)           | Link to Privacy Policy                                                           |
| :-------------------- | :--------------------------------------------------- | :------------------------------------------------- | :------------------------------------------------ | :----------------------------------------------- | :------------------------------------------------------------------------------- |
| **Resend.com**        | Email delivery (transactional + notification emails) | USA                                                | Account email addresses, notification preferences | SCCs 2021/914, Module 2 + supplementary measures | [Resend Privacy Policy](https://resend.com/legal/privacy-policy)                 |
| **DigitalOcean**      | Cloud hosting & storage                              | USA / Netherlands (depending on deployment region) | User account data, content uploads, activity logs | SCCs 2021/914, Module 2 + supplementary measures | [DigitalOcean Privacy Policy](https://www.digitalocean.com/legal/privacy-policy) |

## **4. Change Log**

| **Date**   | **Change**                            | **Notes**                            |
| :--------- | :------------------------------------ | :----------------------------------- |
| 2025-08-27 | Added [Resend.com](http://Resend.com) | New Sub-processor for email delivery |
| 2025-08-27 | Added DigitalOcean                    | New Sub-processor for cloud hosting  |
| 2025-08-27 | Removed Payment Vendor                | Payment processing not applicable    |

## **5. Contact**

Questions about this list or your rights under the DPA can be directed to: [<u>privacy@squid.gg</u>](mailto:privacy@squid.gg)