Subprocessors
Last updated: July 6, 2026
Atrium Elite uses the following subprocessors to provide the Service. Each is bound by data-protection obligations consistent with our Data Processing Addendum (available to business customers on request).
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting & compute (ECS), database (RDS Postgres), file storage (S3) | All Customer Data at rest/in transit | United States (us-east-1) |
| Amazon Cognito (AWS) | User authentication & MFA | Account email, authentication metadata | United States |
| Amazon SES (AWS) | Transactional email (invites, password resets, notifications) | Recipient email, message content | United States |
| Stripe, Inc. | Payment processing & subscription billing | Billing contact, subscription + payment metadata (no full card numbers stored by us) | United States |
| U.S. Census Bureau Geocoding Services | Resolving property, listing and comparable addresses to approximate coordinates for the "near me" distance search | Street address, city and state of a property, listing or comparable. No personal data, no account identifiers, and no rate or financial terms are transmitted — the address alone is sent. | United States (federal government service) |
On the Census geocoder specifically. Only a property/listing/comparable street address is sent — never a name, account identifier, contact, rate, or deal term. Commercial building addresses are generally public information rather than personal data, so the exposure is narrow. It is listed here anyway because it is an external data flow, and the honest default is to disclose it rather than to argue it does not count.
⚠️ Open for counsel: the notification clause above requires 30 days' notice to business customers before a new subprocessor begins processing. Confirm whether any signed DPA is in force before treating this as settled — the entry was added on 2026-08-01 and geocoding of existing records began the same day.
Notification of changes. We will provide notice of new or replacing subprocessors per the DPA (currently 30 days). To receive notifications, email privacy@atriumelite.com.
If/when you add connectors (e.g., QuickBooks, Yardi) or analytics/observability vendors, add them here.