Legal
Sub-processors
Last updated: 26 August 2026
Ryse Cloud Pte. Ltd. (UEN: 202611557W)
Ryse engages the third parties listed below to process personal data on behalf of its customers in connection with the Services. This list is incorporated into Schedule B of the Ryse General Terms & Conditions.
Where this list and the snapshot in Annex C of that Schedule differ, this list prevails.
Changes to this list
Ryse gives at least 14 days’ notice before a new sub-processor begins processing personal data, by updating this page. Customers may object on reasonable data protection grounds within 14 days of that update.
Customers can subscribe to change notifications at privacy@rysecloud.com.
Ryse may replace or add a sub-processor sooner than 14 days where reasonably necessary for security, continuity or legal reasons, and will update this page as soon as practicable.
Sub-processors
Third parties that process personal data on Ryse’s instruction, on behalf of its customers.
| Sub-processor | Purpose | Data categories | Processing and access location |
|---|---|---|---|
| Amazon Web Services, Inc. | PurposeApplication hosting and transactional email delivery. | Data categoriesAll personal data processed on the platform. | Processing and access locationSingapore and Australia. |
| GraniteStack Pty Ltd | PurposePlatform development, maintenance and technical support access. | Data categoriesAccess to personal data on the platform during support activities. | Processing and access locationAustralia and India |
| Trust My Travel Limited (trading as Repayd) | PurposePayment processing and settlement on Ryse's instruction. | Data categoriesEnd purchaser name, email, order and transaction data, payment confirmation references. | Processing and access locationUnited Kingdom, with card authorisation routed through local acquiring partners in Australia, Canada, the EU, Singapore, the UAE and the United States. |
| Avalara, Inc. | PurposeTax determination. | Data categoriesTransaction value and delivery address for tax determination. | Processing and access locationUnited States. |
| HubSpot, Inc. | PurposeCustomer relationship management and customer communications. | Data categoriesCustomer personnel contact details. | Processing and access locationUnited States and European Union. |
| Microsoft Corporation | PurposeCorporate email, document storage and collaboration. | Data categoriesPersonal data incidentally contained in correspondence. | Processing and access locationSingapore and Australia. |
| Netlify, Inc. | PurposeMarketing website hosting and content delivery. | Data categoriesWebsite visitor IP addresses and enquiry form submissions. | Processing and access locationUnited States and global edge network. |
| Google LLC | PurposeStorefront and website performance analytics. | Data categoriesWebsite and storefront visitor data. | Processing and access locationUnited States. |
Independent controllers
The parties below determine their own purposes for the processing described and are not sub-processors in respect of it. Repayd appears in both this table and the sub-processor table above: it acts as a sub-processor for processing carried out on Ryse’s instruction, and as an independent controller for its own regulatory and fraud purposes.
| Independent controller | Processing carried out as an independent controller |
|---|---|
| Trust My Travel Limited (trading as Repayd) | Processing carried out as an independent controllerFraud prevention and monitoring, anti-money-laundering and sanctions screening, regulatory reporting, and retention of transaction records required by financial services regulation. Ryse does not receive or store full card data. |
Data protection queries can be sent to privacy@rysecloud.com.