Last updated on March 27, 2026
Rublon sp. z o.o. shares certain data with external companies that may be considered our “sub-processors” under the General Data Protection Regulation (GDPR). Below is a list of entities that process data on our behalf to deliver and support Rublon MFA and related business operations.
Sub-Processors Engaged in Delivering the Rublon MFA Service
These entities process user data in the context of authentication and the infrastructure of Rublon MFA.
Sub-Processors for European Customers
This section lists the sub-processors engaged in delivering the Rublon MFA Service to customers located in Europe. For this purpose, Europe includes 42 countries:
- The European Economic Area (EEA) countries:
- EU Countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden
- EFTA Countries: Iceland, Liechtenstein, Norway
- Other European countries:
- Albania, Bosnia and Herzegovina, Georgia, Kosovo, Moldova, Montenegro, North Macedonia, Serbia, Switzerland, Turkey, Ukraine, the United Kingdom
| Service | Entity | Scope of Service | Data Location |
| IP Geolocation | MaxMind, Inc. | Service for determining the IP location of a user | Global |
| YubiKey OTP authentication method | Yubico AB | YubiKey OTP one-time password service (YubiCloud) | Global |
| Email delivery | Mailgun Technologies, Inc. | Sending e-mail messages (the Email Link authentication method, Enrollment Email, notifications from the Rublon Admin Console) | EU |
| SMS delivery | Twilio, Inc. | Sending one-time SMS codes and SMS links via SMS Passcode and SMS Link authentication methods | United States |
| Phone calls | Twilio, Inc. | Phone Call authentication method | United States |
| Mobile Push authentication method (iOS) | Apple Inc. | Sending push notifications to iOS devices | United States |
| Mobile Push authentication method (Android) | Google Ireland Limited | Sending push notifications to Android devices | United States |
| VAT number verification | Apilayer Data Products GmbH (part of Idera group) | VAT number verification service in the Rublon Admin Console | United States |
| Payment gateway (PayPal Braintree) | PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payment card-related information in Rublon Admin Console | Global |
| DNS | Cloudflare, Inc. | DNS service, CDN, network protection | Global |
| Application infrastructure | Amazon Web Services, Inc. | Hosting, cloud infrastructure for applications and data | EU (Ireland) |
Sub-Processors for Global Customers (Non-European)
This section lists the sub-processors engaged in delivering the Rublon MFA Service to customers located outside Europe.
| Service | Entity | Scope of Service | Data Location |
| IP Geolocation | MaxMind, Inc. | Service for determining the IP location of a user | Global |
| YubiKey OTP authentication method | Yubico AB | YubiKey OTP one-time password service (YubiCloud) | Global |
| Email delivery | ActiveCampaign, LLC | Sending e-mail messages (the Email Link authentication method, Enrollment Email, notifications from the Rublon Admin Console) | United States |
| SMS delivery | Twilio, Inc. | Sending one-time SMS codes and SMS links via SMS Passcode and SMS Link authentication methods | United States |
| Phone calls | Twilio, Inc. | Phone Call authentication method | United States |
| Mobile Push authentication method (iOS) | Apple Inc. | Sending push notifications to iOS devices | United States |
| Mobile Push authentication method (Android) | Google Ireland Limited | Sending push notifications to Android devices | United States |
| VAT number verification | Apilayer Data Products GmbH (part of Idera group) | VAT number verification service in the Rublon Admin Console | United States |
| Payment gateway (PayPal Braintree) | PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payment card-related information in Rublon Admin Console | Global |
| DNS | Cloudflare, Inc. | DNS service, CDN, network protection | Global |
| Application infrastructure | Amazon Web Services, Inc. | Hosting, cloud infrastructure for applications and data | EU (Ireland) |
Vendors Engaged by Rublon for Customer and Business Operations
These entities process user data to support Rublon’s operations, such as marketing, sales management, and direct communication with customers and administrators.
| Service | Entity | Scope of Service | Data Location |
| Support ticketing and customer support system (Freshdesk) | Freshworks Inc. | Ticketing system and technical support services | United States |
| CRM system | Pipedrive OÜ | Customer relationship management system used for sales and account management purposes | EU (Germany) |
| Live chat support | LiveChat Software S.A. | Chat support tool enabling direct communication with the Rublon Support team | Global |
| Communication and collaboration tools (Google Workspace) | Google Ireland Limited | Internal communication and document management services (Gmail, Docs, Drive) | Global |
| Marketing communications and newsletters (Mailchimp) | The Rocket Science Group LLC | Platform for sending product updates to customers and administrators | USA, Global |
| Public status page hosting | Better Stack, Inc. | Provider of the public Rublon Status Page (status.rublon.com). Visitors may voluntarily subscribe to receive email notifications about service status updates. No customer data from the Rublon MFA service is shared or processed by Better Stack. | EU/EEA, United States |
| Internal communication and collaboration (Slack) | Salesforce, Inc. | Internal messaging and collaboration platform used by Rublon employees for support and development purposes | Global |
| Issue and project tracking system (Jira & Confluence) | Atlassian Pty Ltd | Tools for project management, bug tracking and documentation used internally for product development and customer support | EU (Germany) |
Previous Versions
This archive is a collection of links to older versions of the Rublon List of Sub-Processors. Refer to previous versions only if you need to review an earlier list that applied at a specific time.