MATRIXSub-processors
Last Updated: March 2026MatrixSentry uses the following third-party sub-processors to deliver our Services. This page lists all current authorized sub-processors, the data they process, and their processing locations.
Infrastructure & Data Services
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Platform | Core infrastructure — compute, storage, database | Email content, metadata, threat intelligence, customer configuration | United States |
| Cloudflare | Authentication infrastructure, edge compute, access control database | User accounts, session data, customer configuration | United States |
| Redis Cloud | Managed Redis — caching and deduplication | Email metadata, processing state, content hashes | United States |
| Confluent Cloud | Managed Kafka — event streaming | Email processing events, message routing | United States |
Identity Providers
The following providers are used for dashboard authentication via OpenID Connect (OIDC). They receive only a standard authentication request and return your name and email address. Dashboard login does not grant MatrixSentry access to your organization's email environment.
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Identity provider — dashboard login | Name, email address (OIDC pass-through) | N/A (pass-through) | |
| Microsoft | Identity provider — dashboard login | Name, email address (OIDC pass-through) | N/A (pass-through) |
| Okta | Identity provider — dashboard login | Name, email address (OIDC pass-through) | N/A (pass-through) |
AI Providers (Optional)
The following providers are used for: (1) real-time semantic threat analysis during classification, (2) AI-assisted rule tuning, and (3) labeling assistance during model training corpus assembly. All three uses transmit only PII-redacted content and metadata. Each can be disabled at the customer's request — see Privacy Policy Sections 4 and 5 for full details on redaction, retention, and opt-out mechanics. When disabled, no data is sent to these providers.
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic | AI-assisted threat analysis, rule tuning, and training corpus labeling | PII-redacted email metadata and content | United States |
| Google (Gemini API) | AI-assisted threat analysis, rule tuning, and training corpus labeling | PII-redacted email metadata and content | United States |
Changes to This List
We will notify customers of material changes to this sub-processor list at least 30 days in advance via email or the MatrixSentry dashboard.
Contact Us
To request a Data Processing Agreement (DPA) or for questions about our sub-processors, please contact us at:
MatrixSentry Support
[email protected]