Sub-processors
DomainRadar uses as few service providers as possible. This page lists, conclusively, who processes data on our behalf, for what purpose and where. We do not use analytics or AI services. For Google ads, Google receives only the click ID of confirmed trial sign-ups, as an independent controller (see the privacy policy). For our own accounting and invoicing we use bexio (bexio AG, Rapperswil, Switzerland); bexio receives only contact and billing details of our customers, no DMARC reports or check data of your domains (see the privacy policy).
Sub-processors
These service providers process data on our behalf. With each of them, a data processing agreement is in place or is put in place before they are used.
| Provider | Service | Location |
|---|---|---|
| Infomaniak Network SA, Geneva | Hosting of the website domainradar.ch and operation of the DomainRadar application (servers, database, receipt of DMARC reports) | Switzerland |
| Microsoft (Microsoft 365) | Sending of reports, alerts and confirmation emails | Switzerland (data location of the Microsoft 365 tenant) |
| bexio AG, Rapperswil | Accounting, quotes and sending of invoices (only contact and billing details of our customers) | Switzerland (servers in Switzerland according to bexio) |
Data location
The servers, database and receipt of DMARC reports of the DomainRadar application are operated by Infomaniak Network SA in data centres in Switzerland.
Data is passed outside DomainRadar only in these cases: when sending reports and alerts via Microsoft 365 (data location of the Microsoft 365 tenant: Switzerland) to recipients you specify yourself; with webhooks to destinations you enter yourself; and with public lookups that a check requires (DNS, blacklists), using domain names or server addresses. For our accounting and invoicing, contact and billing details of our customers also go to bexio (servers in Switzerland according to bexio).
Not sub-processors, but parties contacted
To run its checks, DomainRadar queries public bodies or connects to your own servers. These parties do not process data on our behalf:
- DNS name servers of the domains being checked (queried via our own resolver)
- Blacklist operators (only the IP addresses of your mail servers)
- Your own servers, for checking HTTPS and mail servers
- Microsoft Entra ID, for signing in via your organisation’s account
Data processing agreement (DPA) on request
If DomainRadar processes personal data on your behalf (for example, recipient addresses for reports), we enter into a DPA under the Swiss FADP and the GDPR. Write to us with the subject “DPA”; you will receive the agreement with all annexes (technical measures, this list, data location, export and deletion).
Changes
We notify customers by email before adding a new sub-processor. You can object to it, or cancel effective the date of the change. This page always shows the current status.