Legal
Sub-processors
Last updated: 20 October 2026
Ryse Cloud Pte. Ltd. (UEN: 202611557W)
Ryse engages the third parties listed below to process personal data on behalf of its customers in connection with the Services. This list is incorporated into Schedule B of the Ryse General Terms & Conditions.
Where this list and the snapshot in Annex C of that Schedule differ, this list prevails.
Changes to this list
Ryse gives at least 14 days’ notice before a new sub-processor begins processing personal data, by updating this page. Customers may object on reasonable data protection grounds within 14 days of that update.
Customers can subscribe to change notifications at privacy@rysecloud.com.
Ryse may replace or add a sub-processor sooner than 14 days where reasonably necessary for security, continuity or legal reasons, and will update this page as soon as practicable.
Change history
- 20 October 2026: Corrected the Amazon Web Services hosting location to Singapore only.
- 1 October 2026: Added Stripe (tax determination, payment processing and settlement) and Product Fruits (in-app help). Removed Avalara.
Sub-processors
Third parties that process personal data on Ryse’s instruction, on behalf of its customers.
| Sub-processor | Purpose | Data categories | Processing and access location |
|---|---|---|---|
| Amazon Web Services, Inc. | PurposeApplication hosting and transactional email delivery. | Data categoriesAll personal data processed on the platform. | Processing and access locationSingapore. |
| GraniteStack Pty Ltd | PurposePlatform development, maintenance and technical support access. | Data categoriesAccess to personal data on the platform during support activities. | Processing and access locationAustralia and India |
| Trust My Travel Limited (trading as Repayd) | PurposePayment processing and settlement on Ryse's instruction. | Data categoriesEnd purchaser name, email, order and transaction data, payment confirmation references. | Processing and access locationUnited Kingdom, with card authorisation routed through local acquiring partners in Australia, Canada, the EU, Singapore, the UAE and the United States. |
| Stripe Payments Singapore Pte. Ltd. | PurposeTax determination, and payment processing and settlement (Stripe and Stripe Connect). | Data categoriesTransaction value and delivery address for tax determination. End purchaser name, email, order and transaction data, payment confirmation references. | Processing and access locationGlobal (AMER, APAC, and EMEA regions) |
| HubSpot, Inc. | PurposeCustomer relationship management and customer communications. | Data categoriesCustomer personnel contact details. | Processing and access locationUnited States and European Union. |
| Microsoft Corporation | PurposeCorporate email, document storage and collaboration. | Data categoriesPersonal data incidentally contained in correspondence. | Processing and access locationSingapore and Australia. |
| Netlify, Inc. | PurposeMarketing website hosting and content delivery. | Data categoriesWebsite visitor IP addresses and enquiry form submissions. | Processing and access locationUnited States and global edge network. |
| Google LLC | PurposeStorefront and website performance analytics. | Data categoriesWebsite and storefront visitor data. | Processing and access locationUnited States. |
| Product Fruits s.r.o. | PurposeIn-app help, knowledge base and help assistant for hotel or restaurant customer users of the admin portal. | Data categoriesCustomer name, email, role and in-app usage data. | Processing and access locationEuropean Union (Ireland) |
Independent controllers
The parties below determine their own purposes for the processing described and are not sub-processors in respect of it. Repayd and Stripe appear in both this table and the sub-processor table above: each acts as a sub-processor for processing carried out on Ryse’s instruction, and as an independent controller for its own regulatory and fraud purposes.
| Independent controller | Processing carried out as an independent controller |
|---|---|
| Trust My Travel Limited (trading as Repayd) | Processing carried out as an independent controllerFraud prevention and monitoring, anti-money-laundering and sanctions screening, regulatory reporting, and retention of transaction records required by financial services regulation. Ryse does not receive or store full card data. |
| Stripe Payments Singapore Pte. Ltd. | Processing carried out as an independent controllerFraud prevention and monitoring, anti-money-laundering and sanctions screening, regulatory reporting, and retention of transaction records required by financial services regulation. Ryse does not receive or store full card data. |
Data protection queries can be sent to privacy@rysecloud.com.