Ensju

Sub-processors

Last updated: July 22, 2026

This page lists the third-party service providers ("sub-processors") that 17 Solutions LLC uses to operate Ensju (the "Service"). A sub-processor is a company we engage to process data on our behalf and on our instructions. This list is a companion to our Privacy Policy and is the canonical, current record of who we share operational data with.

17 Solutions LLC is the data controller. Each sub-processor below is bound by contract to protect your information, to process it only on our instructions, and to use it solely to provide their service to us — never for their own advertising or profiling. We do not sell your data, and we do not share it with advertisers or data brokers.

1. Infrastructure & Hosting

  • Vultr (The Constant Company, LLC — United States) — cloud compute and hosting for the application, database, and probe network. Receives: all service data at rest and in transit on our servers.
  • Cloudflare, Inc. (United States) — DNS and edge proxy for our domains. Receives: request metadata, including IP addresses and requested hostnames, for traffic to the Service.
  • Backblaze, Inc. (United States) — encrypted, off-site database backups (S3-compatible object storage). Receives: encrypted database backups only.

2. Authentication & Billing

  • Clerk, Inc. (United States) — user authentication and organization management. Receives: your name, email address, and sign-in credentials. We never see or store your password.
  • Stripe, Inc. (United States) — payment processing and subscription billing. Receives: your name, email, and payment-card details, which you provide to Stripe directly. We never receive or store full card numbers.

3. Communications

  • SMTP2GO (Yellowpin Ltd — New Zealand, with global delivery infrastructure) — delivery of transactional, account, and alert email. Receives: recipient email addresses and the contents of the messages we send.
  • SMTP2GO (Yellowpin Ltd — New Zealand, with global delivery infrastructure) — delivery of SMS / text-message alerts, for users who opt in only. Receives: the mobile phone number you provide and the contents of the alert messages.
  • MailerLite (MailerLite Limited — Ireland / Lithuania) — delivery of our opt-in email newsletter, for people who subscribe only. Receives: the email address you provide when you subscribe.

4. Observability

  • Axiom (Axiom, Inc. — United States / United Kingdom) — log management and observability. Receives: our services' operational logs, from which we redact personal data such as IP addresses and email addresses before the logs are shipped. Used only to run and secure the Service.

5. Mobile App

  • Expo (650 Industries, Inc. — United States) — over-the-air delivery of updates to our mobile companion app, and delivery of push notifications to it. Receives: for updates, your device's IP address, platform, and app version when the app checks for a newer version; for push, the push token issued for your device and the contents of the alert we are sending (its title, its one-line body, and the link that opens the right screen in the app). Not used to profile, advertise to, or track you.
  • Apple Inc. (United States) — Apple Push Notification service (APNs), the only way to deliver a notification to an iPhone or iPad. Receives: the push token for your device and the contents of the alert, forwarded to it by Expo on our behalf.
  • Google LLC (United States) — Firebase Cloud Messaging (FCM), the only way to deliver a notification to an Android device. Receives: the push token for your device and the contents of the alert, forwarded to it by Expo on our behalf.

Push notifications are off until you allow them in the app. If you never turn them on, or you turn them off again, none of the three receives anything about you for this purpose. What a push contains, how long we keep the device registration, and how to switch it off are described in our Privacy Policy.

6. Marketing & Analytics

  • Leadsy (vtag.ai) — website visitor identification on our public marketing pages only (not the signed-in app or the mobile app). Receives: visitor IP address and on-page activity on ensju.com marketing pages, used to identify prospective business customers for our own outreach.

7. Tools We Self-Host (Not Sub-processors)

For transparency, two supporting tools run on our own infrastructure rather than through an outside vendor, so no third party receives the data they process:

  • Umami — privacy-friendly website analytics. Records only aggregate, non-identifying usage (page views, referring site, approximate region, browser type). Sets no advertising or cross-site tracking cookies and is not present in our mobile app.
  • mCaptcha — proof-of-work anti-abuse CAPTCHA on our public forms. The data it processes stays on our systems.

8. Changes to This List

We update this page when we add, remove, or replace a sub-processor, and we revise the "Last updated" date above. For material changes, we will also update our Privacy Policy and, where required, notify affected customers. If you would like advance notice of changes to our sub-processors, email privacy@ensju.com and ask to be added to our notification list.

9. Contact Us

Questions about our sub-processors or data protection: privacy@ensju.com, or 17 Solutions LLC, 361 Falls Rd. #663, Grafton, WI 53024, United States.