MATRIXSub-processors
Last Updated: March 2026MatrixSentry uses the following third-party sub-processors to deliver our Services. This page lists all current authorized sub-processors, the data they process, and their processing locations.
Infrastructure & Data Services
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Platform | Core infrastructure — compute, storage, database | Email content, metadata, threat intelligence, customer configuration | United States |
| Cloudflare | Authentication infrastructure, edge compute, access control database | User accounts, session data, customer configuration | United States |
| Redis Cloud | Managed Redis — caching and deduplication | Email metadata, processing state, content hashes | United States |
| Confluent Cloud | Managed Kafka — event streaming | Email processing events, message routing | United States |
Identity Providers
The following providers are used for dashboard authentication via OpenID Connect (OIDC). They receive only a standard authentication request and return your name and email address. Dashboard login does not grant MatrixSentry access to your organization's email environment.
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Identity provider — dashboard login | Name, email address (OIDC pass-through) | N/A (pass-through) | |
| Microsoft | Identity provider — dashboard login | Name, email address (OIDC pass-through) | N/A (pass-through) |
| Okta | Identity provider — dashboard login | Name, email address (OIDC pass-through) | N/A (pass-through) |
AI Providers (Optional)
The following providers are used only for the optional AI-assisted rule tuning feature. This feature can be disabled at the customer's request. When disabled, no data is sent to these providers. See our Privacy Policy for full details on data redaction and retention.
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic | AI-assisted threat analysis and rule tuning | PII-redacted email metadata and content | United States |
| Google (Gemini API) | AI-assisted threat analysis and rule tuning | PII-redacted email metadata and content | United States |
Changes to This List
We will notify customers of material changes to this sub-processor list at least 30 days in advance via email or the MatrixSentry dashboard.
Contact Us
To request a Data Processing Agreement (DPA) or for questions about our sub-processors, please contact us at:
MatrixSentry Support
support@matrixsentry.com