This page lists the services outside Sipher Ltd that can handle personal data when you use SipherMail. Most of the product runs on dedicated servers we rent. See How we protect your data.
Always in use#
| Provider | Purpose | Data involved |
|---|---|---|
| Infrastructure hosting providers (Europe) | Dedicated servers for the app, database, mail server, monitoring and Sipher AI, plus object storage for mail data, uploads and encrypted backups | All service data |
| Cloudflare | DNS, and a proxy in front of the website and image proxy hostname | Web traffic to those hostnames, including IP addresses |
| Stripe | Card payments and subscriptions on the web | Billing details, email, plan |
| RevenueCat, Apple and Google app stores | In-app purchases on iPhone and Android | App user ID, purchase status |
| Expo push service, Apple Push Notification service, Google Firebase Cloud Messaging | Mobile push notifications | Device push token, notification content |
| Browser push services (run by browser makers) | Web push notifications you turn on | Push subscription, notification content |
| ip-api.com | Approximate place of a sign-in, shown in security alerts | IP address |
| Gravatar, Clearbit, favicon services (Google, DuckDuckGo, icon.horse), Cloudflare DNS over HTTPS | Sender pictures and logos | A hash of the sender’s address, or the sender’s domain |
Locations for the other providers are set by each provider. Business customers can ask for the names and locations of our infrastructure hosting providers, and they are also listed in the data processing agreement.
Only when you connect them#
| Provider | Purpose | Data involved |
|---|---|---|
| Google, Microsoft, Yahoo | Importing mail and sending as your address | Sign-in tokens, mail you choose to import |
| Apple, Google, Microsoft | Signing in with that account | Name and email the provider shares |
| DNS providers (Cloudflare, GoDaddy, DigitalOcean, Porkbun, Vercel and others) | Adding DNS records when an organisation admin uses automatic setup | The API token you provide, your DNS records |
Run on our own servers#
Error tracking, the status page, monitoring, the vector database for Sipher AI, the CAPTCHA check and the Sipher AI model all run on SipherMail servers, not with an outside vendor.
Sipher AI#
Sipher AI runs on a model hosted on SipherMail’s own servers. A path to an outside AI provider exists in the software but is disabled by default, and we do not use it for customer mail.
We update this page when the list changes.