Marad B.V. shares only the minimum personal data necessary for each purpose with the subprocessors listed below. All subprocessors are bound by data protection obligations, confidentiality requirements, and appropriate technical and organisational measures.
Controllers receive advance written notice of changes to this list, with a minimum notice period of 14 days, and may object during that window on data protection grounds. See our Data Processing Agreement for how this list is incorporated into our processing terms.
| Subprocessor | Country | Processing activity | Data categories |
|---|---|---|---|
| RSH | Netherlands | Hosting services, file storage and backup services | Customer and operational data stored or processed in Marad services |
| Leaseweb | Netherlands and Australia | Hosting services, file storage and backup services | Customer and operational data stored or processed in Marad services |
| Microsoft | EU (Ireland) and Global | Cloud hosting of Marad services, DNS, infrastructure operations, email, file sharing, and collaboration tools | Customer account and contact data, licence and entitlement data, authentication and access logs, communications, documents and attachments |
| NetRom Software | Netherlands | Software development, maintenance and testing | Operational data, test data, documentation, and limited customer data for support or troubleshooting |
| YouSign (rebranding to YouTrust) | EU (France) | Electronic signatures, identity verification and document workflow | Names, email addresses, signatures, signed document contents, and identity verification data |
| Mailchimp | USA | Email marketing and transactional email delivery | Names, email addresses, email engagement data (opens, clicks) |
All subprocessors operate under a data processing agreement, confidentiality obligations, access controls, and, where data leaves the EEA, standard contractual clauses or equivalent transfer safeguards.
Former subprocessors
The following subprocessors are no longer used by Marad B.V. They are listed here for transparency, so controllers can see when each one was phased out.
| Subprocessor | Country | Processing activity | Data categories | Phased out |
|---|---|---|---|---|
| Asana | EU and Global | Project management and task tracking | Task data, project timelines, internal notes, customer contact details | October 2026 |
Questions about a specific subprocessor or a proposed change can be sent to privacy@marad.com.