Skip to content
Changineers Engineering Handbook

Subprocessors

2026.1

Changineers engages the following third-party service providers (subprocessors) in the course of delivering the platform. This list covers services that may process or transit customer data. Workforce-only tooling is out of scope.

SubprocessorRoleData processedLocation
Amazon Web ServicesPlatform hosting: Cognito, Aurora, DynamoDB, S3, Lambda, CloudFront, API Gateway.Authentication state, platform data, content, media, and recordings.Australia. ap-southeast-2 (Sydney) primary; ap-southeast-4 (Melbourne) for disaster recovery replication.
TwilioVideo conferencing.Live audio and video streams during calls; recordings held transiently until the call completes.Australia. Media routing pinned to the AU region; recordings are migrated into AWS S3 (AU) on call completion.
SentryApplication error monitoring.Anonymised stack traces and crash reports. No customer personal information.United States.
incident.ioAlert routing and incident response coordination.Alert metadata and incident timelines. No customer personal information.United States.

Hiring & onboarding

Acceptable use of AI tools Approved software

Building software

Engineering principles Secure development Solution design Shipping code Penetration testing

Shipping & operations

Operations security Architecture Change management Emergency change Configuration baselines Observability Threat detection Vulnerability management

Data

Customer data deletion

Resilience & response

Incident response

Public

Modern slavery statement Responsible disclosure

Deprecated (pending removal)

Security Program Overview Policy Management Compliance Audits and External Communications Security Architecture and Operating Model Roles, Responsibilities and Training Risk Management System Audits, Monitoring and Assessments HR and Personnel Security Access Facility Access and Physical Security Data Management Data Protection Secure Software Development and Product Security Configuration and Change Management Threat Detection and Prevention Vulnerability Management Mobile Device Security and Media Management Business Continuity and Disaster Recovery Incident Response Breach Investigation and Notification Third Party Security and Vendor Risk Management Employee Handbook Subprocessors