Last updated: September 2026

Subprocessors

Third parties yeil uses to provide the service. Referenced from the Data Processing Agreement. We give 30 days' notice before adding a new subprocessor. Our applications, databases and object storage run on hardware we own; the public-facing edges listed below run on rented instances.

• StripePrivacy

  Payment processing.

  Payment method and subscription state.

• LinodePrivacy

  Compute for the public web edge, the public SMTP edge, and one of two authoritative nameservers.

  These are machines we operate on Linode hardware, so Linode has infrastructure-level access to what runs on them: web requests after TLS is terminated, inbound and outbound mail in plaintext including bodies and attachments, our mail signing key, and a replica of every dns zone with the key used to sign its answers.

• AWSPrivacy

  Second authoritative nameserver.

  A local replica of every dns zone and its records, plus the key used to sign that zone's answers, stored on the instance.

• VultrPrivacy

  Public status page hosting.

  Public health-check data. No user content.

• ApplePrivacy

  Push notifications to the yeil iOS app (APNs).

  Opaque device token, plus the sender name and address, subject line, unread count and message identifiers of each notification, in cleartext. The preview text is encrypted and Apple cannot read it.