Sub-processors
Last updated: July 22, 2026
This page lists the sub-processors under GDPR that Aventopay uses to provide the service, in accordance with article 28 of Regulation EU 2016/679. It supplements our privacy policy and our DPA.
Current list
| Function | Category | Country | Guarantees |
|---|---|---|---|
| Execution of payment operations | Licensed payment institution(s) | European Union | Payment institution licence, PCI DSS Level 1, DPA, SCCs if necessary |
| Platform hosting | Vercel Inc. | United States | Data Privacy Framework, SCCs, standard technical measures |
| Transactional email delivery | Postmark (ActiveCampaign Inc.) | United States | DPA, SCCs |
| IP analysis (anti-fraud) | ip-api.com | European Union | No personal data other than public IP |
Notification of changes
Any addition or substitution of sub-processor is notified to active Merchants by email with reasonable notice, before entry into force. The Merchant has a right of reasoned objection.
Contact
Questions related to sub-processors: privacy@avento-pay.com.