OPENOSINT CLOUD | Sub-processors | 2026-06-13

## SUB-PROCESSORS

OpenOSINT Cloud uses the following third-party sub-processors to deliver the Service. This list is referenced in our Privacy Policy (§5). Last updated: 2026-06-13.

For BYOK (bring-your-own-key) data sources, the data providers are chosen by the customer and are not listed here; you are bound by your chosen provider’s own terms.

## PROCESSOR LIST

Sub-processor | Purpose | Location | Transfer mechanism
--- | --- | --- | ---
Polar | Payment processing / Merchant of Record. Handles billing, invoicing, and international VAT on behalf of the operator. | USA | Standard Contractual Clauses (SCCs)
Heroku (Salesforce) | Cloud hosting and infrastructure. The OpenOSINT Cloud API runs on Heroku dynos; Heroku Postgres stores account and usage data. | USA | Standard Contractual Clauses (SCCs)
IP2Location | OSINT data provider for IP geolocation, ISP, proxy detection, and threat intelligence lookups via the `search_ip2location` tool. | Malaysia / USA | Standard Contractual Clauses (SCCs)

## BYOK DATA SOURCES

When you supply your own API keys (BYOK) to use additional data sources (e.g. Shodan, VirusTotal, HaveIBeenPwned, Censys, AbuseIPDB), those providers process your queries directly under your account and their own terms. OpenOSINT Cloud transmits your key to the provider only to fulfil the lookup you request; we do not store query results beyond the response window.

## CHANGES

We will update this page when sub-processors are added or removed. Material changes will also be communicated via the Privacy Policy update mechanism. Contact openosint@yahoo.com with questions.

Home · Terms of Service · Privacy Policy · Acceptable Use · Blog · GitHub