Data Hosting & Subprocessors

Last updated: December 21, 2025 • Version: 1.0

Overview

This page provides detailed information about where Everkeep hosts your data and which third-party service providers (subprocessors) we use to deliver our services.

Note: The waitlist site collects email addresses to notify you when the pilot launches. The full Everkeep platform (post-launch) uses Cloud SQL/Cloud Storage for scheme data.

Primary hosting: All core application data is hosted in Australia (Google Cloud Platform, australia-southeast1 region).

Overseas processing: Some service providers process limited personal information overseas as described below. We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles.

Primary Infrastructure

Google Cloud Platform (Australia)

Region: australia-southeast1 (Sydney)
Services: Cloud Run (compute), Cloud SQL (PostgreSQL database), Cloud Storage (file storage)
Data categories: All application data including user accounts, scheme records, meeting data, documents, financial records
Data residency: Primary data stored in Australia

Google Cloud Platform maintains SOC 2, ISO 27001, and other security certifications. For more information, see Google Cloud Security & Compliance.

Current Service Providers (Subprocessors)

These service providers currently process limited personal information to support our waitlist and pilot program:

Provider	Purpose	Data Categories	Processing Location
Google Cloud Platform Infrastructure provider	Infrastructure hosting, compute, database, storage, networking	All application data	Australia
SendGrid (Twilio Inc.) Email delivery platform	Email delivery, waitlist contact storage, delivery metrics	Email addresses; subscription status; email delivery metadata and engagement metrics; email content processed for delivery	United States

Note: SendGrid processes email addresses and message content in the United States for email delivery purposes. We use SendGrid's built-in unsubscribe and suppression features to honor opt-out requests.

Planned Service Providers (Post-Launch)

These service providers are planned for use after the platform launches. We will update this page before enabling these integrations:

Provider	Purpose	Data Categories	Processing Location
Stripe Payment processing	Subscription billing, payment processing, invoice management	Payment card details, billing information, transaction history	United States
Twilio SMS notifications	SMS notifications for meeting reminders and urgent updates	Phone numbers, message content	United States

Note: These providers are not currently processing any data. This list is provided for transparency about planned future integrations.

Data Protection Measures

When engaging service providers that process personal information, we:

Select providers with strong security and privacy practices
Review their security certifications and compliance (SOC 2, ISO 27001, etc.)
Put in place contractual protections and assess provider security and privacy controls appropriate to the risk
Limit data sharing to what is necessary for service delivery
Monitor provider compliance with our requirements

Access Controls (Post-Launch)

Your strata committee controls who can access your scheme data within the Everkeep platform after launch:

Role-based access: Committee members, lot owners, and service providers have different permission levels
Committee control: Committees can add or remove users and assign roles
Audit logging: All data access and changes are logged with timestamps
Secure authentication: Multi-factor authentication available for committee members

Updates to This Page

We will update this page when we:

Add or remove service providers
Change hosting infrastructure
Modify data processing locations

Material changes will be communicated via a notice on our website and, where appropriate, by email.

Questions?

For questions about data hosting, service providers, or data protection:

Email: security@everkeep.tech

For privacy rights and complaints, see our Privacy Policy.

Back to home