Tryso uses the service providers below ("sub-processors") to host and run the Service. Each is bound by a contract that requires confidentiality, security and data protection terms at least as protective as our Data Processing Addendum. We give at least 30 days' notice before adding or replacing one; email [email protected] to subscribe to change notices.
1. Infrastructure sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Contabo GmbH | Cloud servers that run the application, databases, files, queues and backups | All Customer Data and account data | European Union (Germany) |
| Cloudflare, Inc. | DNS, content delivery, TLS, DDoS protection, bot checks (Turnstile) | IP addresses, request metadata, cached public content | Global edge network; United States |
| Let's Encrypt (Internet Security Research Group) | Issuing TLS certificates for Tryso and custom store domains | Domain names | United States |
| Email delivery provider (SMTP) | Sending account, security, billing and store notification emails | Recipient name and email address, message content | As listed when enabled |
2. Payment processors for our subscriptions
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| OnePay (Spemai (Pvt) Ltd) | Card tokenisation and charging subscription fees | Billing name, email, phone, card token, amount | Sri Lanka |
3. Optional features
These providers are used only when you, or an organization you belong to, turn the related feature on:
| Provider | Feature | Location |
|---|---|---|
| Google LLC | Sign in with Google, Google Maps location picker | United States |
4. Not sub-processors
Services you connect to your own organization — such as Google Ads, Google Analytics, Meta, TikTok, Cloudflare DNS for your domain, Shopify, WooCommerce, QuickBooks, Odoo, PayHere, OnePay, Koko, MintPay, Fardar and your chosen SMS, WhatsApp or email gateway — are your own providers. They process data under your agreement with them, as explained in the Third-Party Integrations and API Data Policy.
5. Changes
Last reviewed on the date shown at the top of this page.

