Data Processing & Service Providers

What BADWEB processes to provide the platform

BADWEB processes account identity, tenant and product identifiers, product configuration, authorised product records, subscription metadata, support/data requests, audit and security events, provisioning state and operational health information to provide and protect the service.

Infrastructure and operational providers

• PostgreSQL stores application and product records.
• AWS S3 is used for private media-object storage; public access blocking is part of the application’s storage contract.
• AWS SQS is used for queued work.
• AWS SES is used for transactional email delivery.
• Caddy is used by the managed public web/TLS routing design.
• Paddle is used for paid checkout, subscription and billing-provider events.

No invented provider promises

A provider name on this page describes an integration present in BADWEB; it does not claim that every provider hosts data in a particular country, holds a particular certification for this deployment, or has signed a particular transfer mechanism unless the operator has separately verified and documented that fact.

Customer-controlled product data

A Business Website customer controls the business content and visitor/contact information it chooses to collect through its site. Customers remain responsible for lawful purpose, notices, permissions and retention requirements applicable to their own use.

International transfers

Cloud, email and payment operations can involve processing outside the user’s country. The operator must determine and document any transfer safeguard required by applicable law for the actual configured providers and locations. This page deliberately does not manufacture a legal transfer basis that has not been verified.

Customer-specific agreements

Where a customer requires a data-processing agreement, subprocessor schedule, security exhibit or jurisdiction-specific terms, those documents should reflect the actual operator entity, provider configuration and legal roles for that customer. The versioned Platform Legal control can publish operator-reviewed documents without rewriting this public factual page.