Subprocessors
Processors that may handle customer data. The list is configuration-driven and must stay factual.
Infrastructure
The application host (Plesk on the configured server) stores the database, application logs, and encrypted secrets. Outbound SMTP uses the configured mail host.
Optional
Stripe (when billing keys exist), Cloudflare (when a customer stores their own DNS token — that token is the customer’s relationship with Cloudflare), Let’s Encrypt (when ACME is used; they receive hostnames and public keys, not your account password).
Analytics
No third-party analytics ship enabled by default.