Legal
Sub-Processors
This Sub-Processors document outlines the third-party service providers that Concord utilizes to deliver its services and ensure compliance with data protection regulations.
Effective Date: January 1, 2024
Last Reviewed On: October 28, 2025
| Sub-Processor | Service | Purpose | Location(s) |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting & Infrastructure | Secure cloud computing for APIs, storage, logging, email, and other computing needs. | United States & Local (Data Centers located all around the world via the Cloudfront CDN. Traffic will be automatically routed to the nearest data center.) |
| Cloudflare, Inc. | Content Delivery Network | Web infrastructure and website security, providing content delivery network services, DDoS mitigation, internet security, and distributed domain name server services. | United States & Local (Data Centers located all around the world. Traffic will be automatically routed to the nearest data center.) |
| Microsoft, Inc. | Cloud Computing & Hosting Services / Office, Email, & Document Management / OpenAI AI-Related Services | Microsoft provides office software, email/web hosting, cloud computing, and AI-based services. | United States & Local (Data Centers located all around the world. Traffic will be automatically routed to the nearest data center.) |
| MongoDB, Inc. | Database | MongoDB provides scalable database services used to host certain customer data in a secure and protected environment. | United States |
| Stripe, Inc. | Payment Processor | Used to support customer subscriptions and payment processing. | United States |
| Twilio, Inc. | Calling & SMS Functionality | Used to support phone calling and SMS functionality. | United States |