Companies / Domain Posture / Subprocessors
Domain Posture runs external security checks on any domain, covering DNS, email authentication, TLS, security headers, DNSSEC and AI-crawler policy, and produces dated, signed reports. It serves security teams and consultants who scan and monitor their own or their clients' domains on a schedule.
Summarized from its homepage on 9 Nov 2026.
Subprocessors of Domain Posture
Domain Posture declares 11 subprocessors.
| Subprocessor | Purpose |
|---|---|
| Object storage for generated report artifacts | |
| DNS and edge termination for our domains | |
| Conversion measurement on the checkout and order pages only | |
| Traffic measurement — consent-gated, default-denied in the EEA/UK/CH | |
| Migadu | Inbound email hosting for our own addresses |
| Managed PostgreSQL — the application database | |
| Payments for buyers in India (one-shot reports) | |
| Transactional email — sign-in links, report delivery, drift alerts | |
| SSLMate (Cert Spotter) | Certificate-transparency log queries during subdomain discovery |
| Payments for buyers outside India (one-shot reports and subscriptions) |
1 more subprocessor
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inVendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Domain Posture's full stack
Every vendor with its source and date, and an alert when Domain Posture adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call