Hafinen Limited (“Hafinen”, “we”, “us”) uses carefully selected third-party service providers (“Subprocessors”) to support the delivery, security, reliability, and functionality of the Hafinen platform.
This page identifies the subprocessors currently authorized to process Customer Data or Personal Data in connection with Hafinen’s Services.
This disclosure forms part of Hafinen’s data protection and compliance framework and should be read together with our Privacy Policy, Terms of Service, and Data Processing Addendum (DPA).
What is a Subprocessor?
A Subprocessor is a third-party vendor engaged by Hafinen to process data on behalf of our customers in order to deliver our Services.
Subprocessors may support cloud infrastructure, email delivery, SMS delivery, payment processing, content delivery, DDoS protection, backups, API delivery, and system reliability.
Hafinen performs reasonable due diligence before engaging subprocessors.
Current Subprocessors
| Subprocessor | Purpose | Processing Regions |
|---|
| Amazon Web Services (AWS) | Cloud infrastructure and hosting | South Africa, United Kingdom |
| Contabo | Cloud infrastructure and backups | United States, Netherlands, United Kingdom, Germany |
| Cloudflare | CDN, security, DDoS mitigation, caching | Global |
| Mailgun Technologies | Transactional email delivery and notifications | Germany, Belgium |
| Africa’s Talking International Limited | SMS notifications and delivery | Kenya |
| Safaricom Limited | Mobile money payment processing | Kenya |
| Stripe | Payment processing for global self-service customers | United States |
| Paystack | Payment processing for self-service customers in Africa | Kenya |
Categories of Data Processed
Depending on the Services used, subprocessors may process limited categories of Customer Data, including account information, authentication metadata, email delivery metadata, billing records, payment transaction data, support logs, infrastructure logs, API logs, webhook delivery logs, and notification records.
Subprocessors do not receive access to Customer Data beyond what is necessary for their specific service function.
International Data Transfers
Because Hafinen serves customers globally, Customer Data may be processed across multiple jurisdictions.
Where data transfers occur internationally, Hafinen implements appropriate contractual and organizational safeguards consistent with applicable privacy laws.
Security and Compliance
Hafinen requires subprocessors to maintain reasonable security and privacy standards appropriate to the services they provide.
Where applicable, Hafinen enters into contractual agreements requiring confidentiality, security controls, lawful processing, breach reporting obligations, and data protection compliance.
Changes to Subprocessors
Hafinen may add, remove, or replace subprocessors as our Services evolve.
Where required by law or contract, Hafinen will provide notice of material changes.
Customers may contact Hafinen regarding any concerns about newly added subprocessors.
Contact
For questions regarding Hafinen subprocessors or data protection:
Hafinen Limited 107 Lower Kabete Road Westlands, Nairobi, Kenya Email: [email protected]
