Subprocessors
Last updated: August 9, 2026
This page identifies the third-party service providers that Acked (operated by Glasstack, LLC) uses to process personal data. Those that process Customer Personal Data in connection with providing the Services are Subprocessors as described in our Data Processing Addendum; the remainder process personal data for which Acked is the controller. This is the single, authoritative list, and it is the page our Privacy Policy refers to.
A provider marked conditional processes Customer Personal Data only where a Customer enables the optional feature that requires it, and never for a Customer who has not. Section 11.2 of the Data Processing Addendum sets out how those are engaged.
Acked may update this list from time to time as our infrastructure and service providers evolve.
Current Subprocessors
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, edge compute, storage, networking, caching, and DDoS/bot protection | All traffic to our sites and API, including IP addresses; customer account information, incident data, schedules, notification metadata, and operational data held in Cloudflare storage | Global |
| PlanetScale, Inc. | Managed Postgres, our primary database | Account, organization, on-call configuration, incident, delivery, and audit data | United States |
| Postmark (ActiveCampaign, LLC) | Transactional email delivery | Email addresses, email content (including alert titles and bodies), delivery metadata | United States |
| Apple Inc. (Apple Push Notification service) | iOS push notification delivery | Device push tokens and notification payloads | Global |
| Google LLC (Firebase Cloud Messaging) | Android push notification delivery | Device push tokens and notification payloads | Global |
| Dash0 | Infrastructure monitoring, logging, metrics, and application performance monitoring | Operational telemetry, diagnostic logs, and limited Customer data contained in logs or traces | United States |
| Stripe, Inc. | Payment processing and subscription billing | Name, email address, billing address, and payment card details, collected by Stripe directly and not stored by Acked | United States |
| Telnyx LLC (conditional) | Voice paging: placing calls to on-call responders, and the one-time code that confirms a phone number belongs to the person who added it | Phone numbers of users who add one, and the metadata of calls and verification messages placed to them | United States |
Infrastructure Providers
Acked relies on infrastructure providers to operate the Services. These providers may process Customer Personal Data as necessary to provide their services.
Changes to this List
Acked may add, replace, or remove Subprocessors as our business and infrastructure evolve. Changes are published on this page.
Where a new Subprocessor will process Customer Personal Data, Acked gives at least thirty (30) days' notice by email before it begins processing, and Customers may object, on the terms set out in section 11 of the Data Processing Addendum.
A Subprocessor marked conditional is added to this page before the feature it supports can be enabled, and processes a Customer's Personal Data only from the moment that Customer enables the feature. The thirty-day period above does not apply to it, because nothing of that Customer's reaches it unless and until they choose to enable it — see section 11.2 of the Data Processing Addendum. The objection rights in section 11.3 apply in full.
One exception, and it is narrow: where a provider must be engaged or replaced urgently to keep the Services secure and available — a provider in the alert delivery path that has been compromised or has stopped working — Acked may do so first and notify within five (5) business days, with the same right to object. Waiting thirty days in that situation would mean alerts not reaching the people waiting for them.
A Subprocessor marked conditional processes Customer Personal Data only where a Customer enables the optional feature that requires it. Acked does not engage a conditional Subprocessor for Customers who have not enabled that feature, and identifies it before the feature can be enabled.
Questions
Questions regarding Acked's Subprocessors or data processing practices may be directed to: