Resources
Subprocessors
The third-party providers that may process customer data when WebCastle delivers and operates services, with their role, the data involved and the region.
Reviewed 12 August 2026
How WebCastle uses subprocessors
A subprocessor is a third party that processes customer data on WebCastle’s behalf in the course of delivering a service. Where WebCastle acts as a processor for a customer, the customer remains the controller of that data and the customer agreement governs how subprocessors may be engaged.
WebCastle keeps the number of subprocessors deliberately small. Infrastructure is concentrated with a primary cloud provider rather than distributed across many services, which reduces both the data footprint and the number of relationships that require oversight.
Which subprocessors apply to a given engagement depends on what WebCastle built and whether WebCastle continues to operate it. For projects delivered to a customer’s own infrastructure, the customer selects and contracts with their own providers directly.
Current subprocessors
Confirmed third parties that may process customer data when WebCastle delivers and operates a service.
| Provider | Service | Purpose | Data involved | Region |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and hosting | Hosting of application servers, storage and managed databases for services WebCastle builds and operates. | Application and customer data stored or processed by the hosted service, as defined in the customer agreement. | Region selected per engagement and agreed with the customer. |
Common questions
- Notification of changes
- WebCastle is establishing a process for notifying customers of material subprocessor changes. Any existing notification commitment in your agreement takes precedence.
- Project-specific lists
- Because subprocessors vary by engagement, the authoritative list for your project is the one recorded in your agreement. The security team can confirm it on request.
- Customer-operated systems
- Where WebCastle built a system that the customer now hosts and operates, the customer’s own providers apply and are outside WebCastle’s subprocessor scope.
- Data processing agreements
- WebCastle is formalizing its data processing documentation, including agreements with subprocessors. Contact the security team to discuss your requirements.