Subprocessors
MarineClaims Pro — claims assessment and marine asset survey platform
Effective 1 July 2026 · Version 3.0
Last reviewed: 3 October 2026
Related: Data Processing Addendum · Privacy Policy · Security Overview
1. What this list is
Sustainable Transport Advisory Pty Ltd (“STA”) uses carefully selected third parties (“Subprocessors”) to help deliver MarineClaims Pro (“MCP”). This page lists material Subprocessors that may Process Customer Content or related personal information to operate MCP.
“Process” includes hosting, storage, transmission, payment processing and related service delivery.
2. Current material subprocessors
| Subprocessor | Role | Data typically involved | Location |
|---|---|---|---|
| DigitalOcean, LLC | App servers; Managed Postgres; Redis | Customer Content; account and technical data | Sydney, Australia |
| Cloudflare, Inc. (R2) | Object storage for claim files, photos, PDFs and signatures | Claim files and photos | United States provider; storage location not locked to Australia |
| Cloudflare, Inc. | CDN / proxy for EmissionsTracker domains where used | IP addresses; request metadata | Global / United States company |
| GoDaddy.com, LLC | DNS for app.marineclaimspro.com | DNS records; related request metadata | United States |
| Resend (sending via Amazon SES) | Transactional email | Account emails; notification content | United States company; sending region Japan (ap-northeast-1) |
| Stripe Payments Australia Pty Ltd (ABN 66 160 180 343) | Subscription payment processing | Billing name, email, payment tokens, invoice metadata (full card numbers are not stored on STA systems). Stripe may process/store payment data in the United States and other regions under Stripe’s terms | See Stripe’s terms (includes United States and other regions) |
| xAI (Grok API) | Historic import Read only, when an owner or manager ticks the box that allows it: reads document text to fill a draft import workbook | Text of the documents in the selected claim folders (no files or photos; identity-document and bank-detail pages held back first) | United States |
| OpenStreetMap Foundation (Nominatim) | Organisation address geocoding only | Organisation addresses submitted for geocoding | United Kingdom (OSMF) |
| Browser push providers (Google / Apple / Mozilla) | Web push notifications where push is enabled | Notification title, body and link | Those providers’ infrastructure |
Marketing-only (not claim processing)
| Provider | Role | Notes |
|---|---|---|
| Google Ads | Advertising tag on STA marketing / WMP sites | United States. Not loaded inside the MCP application for claim processing. See Cookie Notice. |
3. Affiliates
STA does not currently list separate STA affiliates as Subprocessors.
4. How we update this list
Under the Data Processing Addendum, Customers generally authorise STA’s use of Subprocessors. When STA adds or replaces a material Subprocessor, STA will update this page and, where feasible, notify account owners by email in advance.
Objection and termination rights (if any) are as set out in the DPA.
5. Customer responsibilities
Customers remain responsible for third-party tools they connect to MCP (if integrations are enabled) and for Portal Users they invite.
6. Contact — The STA Team
Questions about Subprocessors: support@sta-au.com or info@sta-au.com
Sustainable Transport Advisory Pty Ltd, ABN 75 657 423 222, Newport VIC 3015
— The STA Team