Effective Date: 17th July 2026
This document identifies the third-party service providers (“Subprocessors”) that TestMod, Inc., trading as TopMod (“TopMod”), may engage to process Customer Personal Data when providing the TopMod Services.
This Subprocessor List is maintained for the purposes of the TopMod Data Processing Addendum and may be updated in accordance with the change-notification process set out below.
1. How We Use Subprocessors
TopMod carefully selects subprocessors that support the delivery, operation, maintenance and security of the Services. Each subprocessor is subject to contractual obligations requiring appropriate confidentiality, security and data protection measures.
2. Changes to Subprocessors
TopMod may appoint new Subprocessors or replace existing Subprocessors from time to time.
Where a change involves a Subprocessor that will process Customer Personal Data in connection with the Services, TopMod will provide at least fifteen (15) days’ prior notice by updating this Subprocessor List and, where reasonably practicable, notifying affected Customers by email or through the Services.
A Customer may raise a reasonable written objection to a new Subprocessor on legitimate data-protection grounds during that notice period. TopMod and the Customer will work together in good faith to address the objection.
If the parties cannot resolve the objection through commercially reasonable measures, the Customer may terminate the affected portion of the Services by written notice before the new Subprocessor begins processing Customer Personal Data. TopMod will refund any prepaid Fees attributable to the unused terminated portion of the Subscription Term.
3. Current Subprocessors
OVH Groupe SA (France): Cloud infrastructure, application hosting and object storage. May process Customer Data, recordings, files, account information, telemetry and technical logs.
Supabase, Inc. (United States): Database hosting, authentication and backend platform services. May process account information, authentication information, Customer Data, usage information and technical logs.
Netlify, Inc. (United States): Website and web-application deployment, hosting and content delivery. May process account information, IP addresses, usage information and technical request logs.
PostHog, Inc. (United States): Product analytics, feature-usage analytics and application telemetry. May process user identifiers, device and browser information, IP addresses, feature-usage data and application telemetry. TopMod does not intentionally provide the substantive content of recordings, screenshots, attachments or bug reports to PostHog.
Functional Software, Inc. d/b/a Sentry (United States): Application monitoring, error tracking and performance diagnostics. May process user identifiers, device information, IP addresses, application errors, diagnostic information and technical logs. TopMod takes reasonable measures to avoid including the substantive content of Customer Data in diagnostic events.
Atlassian Pty Ltd (Australia): Project management, issue tracking and customer-support services. May process account contact information, support communications, attachments and other information submitted in connection with a support request.
4. Subprocessor Categories
· Cloud infrastructure and hosting
· Identity and authentication
· Customer support
· Email and communications
· Monitoring and observability
· Analytics
· Object storage and content delivery
· Error reporting and diagnostics
5. International Transfers
Where a subprocessor transfers Personal Data outside the United Kingdom, the European Economic Area or another jurisdiction recognised as providing an adequate level of data protection, TopMod ensures that appropriate transfer safeguards are in place in accordance with applicable Data Protection Laws. These safeguards may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement (IDTA), the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, adequacy regulations recognised under UK law, the EU-U.S. Data Privacy Framework (where applicable), or another lawful transfer mechanism recognised under applicable law.
Further information about the transfer safeguard applicable to a particular Subprocessor will be made available to the Customer upon reasonable written request.
6. Changes to this List
TopMod may update this Subprocessor List from time to time as service providers are added, removed or replaced. TopMod will publish an updated Subprocessor List prior to appointing a new subprocessor where reasonably practicable. Material changes will be managed in accordance with the TopMod Data Processing Addendum. Customers who reasonably believe the appointment would materially impact their compliance obligations may raise their concerns with TopMod.
7. Contact
For questions regarding subprocessors or international transfers, please contact:
legal@topmodqa.com
