Last updated: 2026-09-11. Governing law: Israel.
Sub-processors
This page lists the third-party sub-processors that Eyal Gabay, trading as "EyalSec",
sole proprietor (osek murshe) no. 211868450, Israel ("EyalSec"), engages to process
personal data in providing the EyalSec / es2 Service. It is referenced by the Privacy Policy
(/legal/privacy) and the Data Processing Agreement (/legal/dpa), and is reproduced at
Annex III of that Agreement.
The list is the same for every EyalSec agent. Deploying es-chromium does not engage any additional sub-processor: Browsing Data is stored and processed in the same place as every other event.
Current sub-processors
| Name | Purpose | Location | |------|---------|----------| | Amazon Web Services (AWS) | Cloud hosting and infrastructure: a single EC2 instance (application compute) with an attached, encrypted-at-rest EBS volume. That one instance hosts the application, a local PostgreSQL database, and the agent artifacts. All Service data, including account data and Event Payloads, is stored and processed here. | The il-central-1 (Israel) AWS region. Data is processed in that region's data centers. | | Amazon SES (Amazon Simple Email Service) | Transactional email delivery: password-reset codes, user invitations, and service notices. Processes recipient email addresses and message content. | The configured AWS SES endpoint (currently eu-central-1, Germany/EU). | | MaxMind | Optional GeoIP enrichment: deriving a coarse country from an IP address for self-hosted web analytics. Used only if the operator enables a MaxMind GeoLite2 database. The lookup runs against a database file on EyalSec's own server, so no data is sent to MaxMind in either case. | As applicable to the GeoIP database/service used. |
Notes
- The Service is hosted in the il-central-1 (Israel) AWS region; Israel benefits from an EU adequacy decision. EyalSec selects the hosting region consistent with applicable data-residency and transfer obligations.
- MaxMind GeoIP is off by default and engaged only when the operator configures a GeoIP database. When disabled, GeoIP enrichment does not occur. When enabled, it is a local lookup and no data leaves EyalSec's server.
- Where AWS or other sub-processors offer their own sub-processor lists, those apply underneath this list.
Changes and notification
EyalSec may add or replace sub-processors. Customers are given at least thirty (30) days'
prior notice of an addition or replacement, in accordance with the general authorization
and notice mechanism in the DPA (/legal/dpa, Section 8), and may object on reasonable
data-protection grounds. If a reasonable objection cannot be resolved, the customer may
terminate the affected Service without penalty and receive a pro-rata refund of prepaid fees
for the unused period.
To subscribe to sub-processor change notices, contact eyal@eyalsec.com.