Legal
Sub-processors
Effective date: 1 November 2026
Atlo uses a small number of third parties (“Sub-processors”) to host and run the Service. This page lists them, as required by section 6 of our Data Processing Agreement.
How we choose and bind sub-processors
Each Sub-processor is selected for its security practices and is bound by a written agreement with data protection terms that give at least the same protection as our Data Processing Agreement. Where a Sub-processor processes data outside the EU or EEA, the transfer relies on an adequacy decision, including the EU-US Data Privacy Framework, or on the European Commission’s Standard Contractual Clauses.
Current sub-processors
The current list, with each Sub-processor’s purpose and processing location, is provided to every customer at signing and is available on request from hello@atlo.io.
Changes
We notify customers by email at least 30 days before we add or replace a Sub-processor. Customers can object within that period, as described in section 6.2 of the Data Processing Agreement.
Contact
Questions about our sub-processors: hello@atlo.io.
