offloadcms

Data Processing Addendum

Last updated: 2026-07-26

This summary describes how offloadcms processes personal data on your behalf. A full signable DPA is available on request at hello@offloadcms.com.

On this page

  1. Roles
  2. Subprocessors
  3. Security measures
  4. Data subject requests
  5. International transfers

01Roles

For the content you publish through the Service, you are the controller and offloadcms is the processor. For account and billing data, offloadcms is the controller.

02Subprocessors

  • Cloudflare — hosting, storage (D1/R2/KV), and delivery.
  • Polar — billing and Merchant of Record.
  • Resend — transactional and magic-link email.
  • MailerSend — transactional email delivery (alternate provider).
  • Amazon Web Services (SES) — transactional email delivery.
  • Amazon Web Services (Secrets Manager) — encrypted storage of your connected-provider credentials.
  • OpenAI — AI models for the orchestration agent and AI editor — receives the prompt you write and the site content the agent reads or edits while fulfilling it.
  • Anthropic — AI models for the orchestration agent and AI editor — receives the prompt you write and the site content the agent reads or edits while fulfilling it.

We will give notice of new subprocessors where required.

03Security measures

Encryption in transit, access controls, least-privilege credentials, and logging. See the Privacy Policy for details.

04Data subject requests

We assist you in responding to access, correction, and erasure requests for content processed on your behalf.

05International transfers

Where personal data is transferred across regions, appropriate safeguards such as Standard Contractual Clauses apply.

Questions about this policy? Email hello@offloadcms.com.