About Sub-processors
RedmineUP uses a limited number of third-party service providers to operate the RedmineUP Cloud service. Where a provider processes Customer Personal Data on behalf of RedmineUP, it is treated as a sub-processor and is subject to appropriate contractual data protection obligations.
The current RedmineUP Cloud sub-processors are listed below.
| Sub-processor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, databases, file storage, backups, infrastructure logging, and monitoring | Customer Content, files, application data, account data, logs, and metadata | Ireland, European Union |
| Sinch / Mailgun | Transactional and application email delivery, including sending and receiving email | Email addresses, message content, headers, attachments, delivery events, and related metadata | United States by default. EU-region processing is available upon request for designated customer email domains |
Amazon Web Services (AWS)
RedmineUP uses AWS as its primary cloud infrastructure provider.
- RedmineUP Cloud application data, databases, file storage, and backups are hosted in the AWS EU (Ireland) region.
- AWS is used for infrastructure monitoring and logging related to operation of the service.
- RedmineUP does not intentionally replicate Customer Data or backups to AWS regions outside Ireland.
AWS may itself use downstream sub-processors in accordance with its own data processing terms.
Sinch / Mailgun
RedmineUP uses Mailgun for transactional and application email delivery.
The standard RedmineUP Mailgun configuration currently uses the United States region. Depending on how a customer uses email functionality, processed data may include:
- Sender and recipient email addresses
- Email subject and message content
- Email headers and routing metadata
- Attachments
- Delivery, bounce, complaint, and related event information
For customers with specific data residency requirements, RedmineUP can configure a separate Mailgun domain in the EU region upon request. Mailgun states that message data for domains configured in its EU region remains within that processing region.
The EU-region option must be requested and configured for the relevant customer environment; it is not the default configuration.
RedmineUP Personnel Access
RedmineUP employees and support personnel are not sub-processors.
Authorized RedmineUP support personnel located in Armenia may remotely access Customer Data where necessary to provide technical support, maintenance, security, or troubleshooting.
Production access is restricted to authorized support personnel on a need-to-know basis. Customer database dumps and attachments are not downloaded to local employee devices for debugging.
Payment Processing
RedmineUP uses Paddle as its Merchant of Record for subscription billing and payment processing.
Paddle receives and processes buyer, billing, and payment information under its own applicable terms and privacy obligations. Paddle does not host or process RedmineUP Cloud project data as part of the Cloud hosting service and is therefore not listed above as a RedmineUP Cloud sub-processor.
Changes to Sub-processors
RedmineUP may add or replace sub-processors as the service evolves.
Where required by applicable data protection law or the applicable customer agreement, RedmineUP will provide notice before a new sub-processor begins processing Customer Personal Data. Customers may raise reasonable data protection concerns regarding a new sub-processor in accordance with the applicable Data Processing Agreement.
Data Residency Requests
Customers with specific contractual or regulatory data residency requirements should contact RedmineUP before enabling the relevant service configuration.
In particular, customers that require email message processing within the European Union may request the Mailgun EU-region configuration.
Last updated: September 18, 2026