Subprocessor Disclosure

Last updated: July 1, 2026

Hafinen Limited (“Hafinen”, “we”, “us”) uses carefully selected third-party service providers (“Subprocessors”) to support the delivery, security, reliability, and functionality of the Hafinen platform.

This page identifies the subprocessors currently authorized to process Customer Data or Personal Data in connection with Hafinen’s Services.

This disclosure forms part of Hafinen’s data protection and compliance framework and should be read together with our Privacy Policy, Terms of Service, and Data Processing Addendum (DPA).

What is a Subprocessor?

A Subprocessor is a third-party vendor engaged by Hafinen to process data on behalf of our customers in order to deliver our Services.

Subprocessors may support cloud infrastructure, email delivery, SMS delivery, payment processing, content delivery, DDoS protection, backups, API delivery, and system reliability.

Hafinen performs reasonable due diligence before engaging subprocessors.

Current Subprocessors

SubprocessorPurposeProcessing Regions
Amazon Web Services (AWS)Cloud infrastructure and hostingSouth Africa, United Kingdom
ContaboCloud infrastructure and backupsUnited States, Netherlands, United Kingdom, Germany
CloudflareCDN, security, DDoS mitigation, cachingGlobal
Mailgun TechnologiesTransactional email delivery and notificationsGermany, Belgium
Africa’s Talking International LimitedSMS notifications and deliveryKenya
Safaricom LimitedMobile money payment processingKenya
StripePayment processing for global self-service customersUnited States
PaystackPayment processing for self-service customers in AfricaKenya

Categories of Data Processed

Depending on the Services used, subprocessors may process limited categories of Customer Data, including account information, authentication metadata, email delivery metadata, billing records, payment transaction data, support logs, infrastructure logs, API logs, webhook delivery logs, and notification records.

Subprocessors do not receive access to Customer Data beyond what is necessary for their specific service function.

International Data Transfers

Because Hafinen serves customers globally, Customer Data may be processed across multiple jurisdictions.

Where data transfers occur internationally, Hafinen implements appropriate contractual and organizational safeguards consistent with applicable privacy laws.

Security and Compliance

Hafinen requires subprocessors to maintain reasonable security and privacy standards appropriate to the services they provide.

Where applicable, Hafinen enters into contractual agreements requiring confidentiality, security controls, lawful processing, breach reporting obligations, and data protection compliance.

Changes to Subprocessors

Hafinen may add, remove, or replace subprocessors as our Services evolve.

Where required by law or contract, Hafinen will provide notice of material changes.

Customers may contact Hafinen regarding any concerns about newly added subprocessors.

Contact

For questions regarding Hafinen subprocessors or data protection:

Hafinen Limited 107 Lower Kabete Road Westlands, Nairobi, Kenya Email: [email protected]

Unaweza kuchagua ni vidakuzi vipi vya hiari ambavyo Hafinen anaweza kutumia ili kuboresha matumizi yako. Ni muhimu sana na vidakuzi vya usalama huwashwa kila wakati kwa sababu ni muhimu kwa uthibitishaji, usalama wa jukwaa, kuzuia ulaghai na utendakazi wa kuaminika wa Huduma. Unaweza kusasisha mapendeleo yako wakati wowote.

Vidakuzi vya lazima kabisa

Vidakuzi hivi ni muhimu kwa Hafinen kufanya kazi kwa usalama na kwa uhakika. Zinaauni uthibitishaji wa akaunti, vipindi vya kuingia katika akaunti, ulinzi wa CSRF, mwendelezo wa kipindi salama, kusawazisha upakiaji na utendakazi mwingine msingi wa jukwaa. Kwa sababu vidakuzi hivi vinahitajika ili Huduma zifanye kazi, haziwezi kulemazwa.

Vidakuzi vya Usalama

Vidakuzi hivi husaidia kulinda akaunti yako na Huduma kwa kugundua shughuli za kutiliwa shaka, kuzuia ufikiaji usioidhinishwa, kupunguza matumizi mabaya, kuthibitisha maombi ya API, kusaidia kupunguza viwango na kudumisha uadilifu wa jukwaa. Vidakuzi hivi vinahitajika kwa usalama na haziwezi kuzimwa.

Vidakuzi vinavyofanya kazi

Vidakuzi vinavyofanya kazi hukumbuka mapendeleo yako na kubinafsisha matumizi yako. Wanaweza kuhifadhi lugha, saa za eneo, mandhari, mipangilio ya ufikivu, ugeuzaji kukufaa kiolesura, na mapendeleo ya dashibodi kwa hivyo huhitaji kusanidi kila wakati unapotumia Huduma.

Vidakuzi vya uchanganuzi

Vidakuzi vya uchanganuzi hutusaidia kuelewa jinsi Huduma zinavyotumiwa ili tuweze kuboresha utumiaji, utendakazi na kutegemewa. Hukusanya maelezo kama vile upitishaji wa vipengele, mwingiliano wa ukurasa, mifumo ya kusogeza, uoanifu wa kivinjari, ripoti za kuacha kufanya kazi na vipimo vya utendakazi. Inapowezekana, maelezo haya yanajumlishwa au hayatambuliwi.

Vidakuzi vya Utendaji

Vidakuzi vya utendakazi huboresha kasi, uthabiti na uitikiaji wa Huduma. Zinaauni akiba, uboreshaji wa uwasilishaji wa maudhui, kusawazisha trafiki, upakiaji wa vipengee, na teknolojia zingine zinazosaidia kutoa hali ya utumiaji thabiti na inayotegemewa.

Vidakuzi vya Mawasiliano

Vidakuzi vya mawasiliano vinaauni mwingiliano unaohusiana na huduma kama vile uwasilishaji wa arifa, ufuatiliaji wa matukio ya barua pepe, uthibitishaji wa SMS na utendakazi mwingine wa mawasiliano unaoboresha jinsi tunavyokufahamisha unapotumia Huduma.