Sub-processors
Version 0.9 · 17 September 2026
A draft, not an agreement.
This document has not been through a lawyer and is not in force. It is published so you can see the substance of what EntryWick intends to commit to, and so that nothing links to a page that does not exist. Anything in square brackets is waiting on a decision.
These are the companies that handle personal data on EntryWick's behalf so that the product can work. Each one is here because a feature needs it, and each row says what it does and what it sees.
This page is the notice required by §3 of the data processing agreement: a new sub-processor is published here, and account owners are told by email, at least 30 days before it starts handling anything.
The list below is generated from the product's own configuration rather than typed out, so a provider this build can send data to and which is missing from it fails a test.
Who sees what
| Company | What it does for us | What it sees |
|---|---|---|
| Stripe | Card payments for tickets, and EntryWick’s own plan billing. | The payer’s name, email and amount. Card numbers are entered on Stripe’s own page and never reach EntryWick. |
| Postmark (ActiveCampaign, LLC) | Sending email — confirmations, tickets, reminders, invitations and password resets. | The recipient’s name and email address, and the content of the message sent to them. |
| Twilio Only when switched on | Sending text messages, where an organization has turned them on. | The recipient’s mobile number and the text sent to them. |
| Apple Only when switched on | Adding a ticket to Apple Wallet, where an organization has turned wallet tickets on. | What is printed on the ticket: the attendee’s name, the event, the day and the ticket’s own code. |
| Google Only when switched on | Saving a ticket to Google Wallet, where an organization has turned wallet tickets on. | What is printed on the ticket: the attendee’s name, the event, the day and the ticket’s own code. |
| Sentry Only when switched on | Error reports, so a fault is found before somebody has to describe it. | What the error carried — the page, the account and, where a failure is about a record, its identifiers. Never a password, a token or a webhook secret. |
Plus whoever runs the servers EntryWick is hosted on, which holds everything by definition: [OWNER: hosting provider and region].
Questions about any of this go to [OWNER: the address legal questions should reach].