Service providers

Updated 26 October 2026 · Pilot policy version 1

This register distinguishes the email-delivery path from website, support and billing services. Not every provider below processes customer email content. Provider legal entities and subprocessors can depend on the contracted service.

Amazon Web Services — application and delivery

Hosts authentication, application processing, email delivery, message storage, delivery records and operational logging. Our deployed application resources are configured in Sydney, Australia (ap-southeast-2). AWS is a US-headquartered provider and may operate account administration, support and service-wide anti-abuse systems outside that region. AWS subprocessors.

SES maintains a service-wide global suppression list for hard-bouncing addresses. AWS does not specify its storage location on the global suppression documentation. Our regional deployment is not a promise about every AWS-managed operational copy or dataset.

Cloudflare — website and DNS

Serves this public website and authoritative DNS through its global network. Website request information can include IP address, URL, browser details and security events; processing is not restricted to Australia and may include the United States. The email API and dashboard are separate Sydney endpoints, not proxied through this website. Cloudflare privacy policy.

Google Workspace — business enquiries

Hosts our business correspondence, including early-access requests, support and privacy complaints, with the sender’s contact details and the content supplied. This is separate from customers’ programmatic email-delivery path. Processing may occur in the United States and other countries where Google and its providers operate. Google’s provider locations. We have not verified an Australia-only storage arrangement for business correspondence.

OpenAI — authorised administrative assistance

Administrative and support work may use OpenAI assistance tools with selected enquiry details, correspondence or diagnostic information. This is not part of automatic email delivery. Processing may occur overseas, including the United States, under the applicable service terms and settings. Do not include sensitive recipient lists or message content in an enquiry; contact us to arrange an appropriate handling method. OpenAI privacy information.

Stripe — optional billing

When billing is enabled, Stripe receives the billing contact, team identifier and payment/subscription information. Full card details are entered directly with Stripe. Our billing integration does not send email bodies, recipient lists or API keys to Stripe. Processing can occur overseas, including the United States, depending on payment and service providers. Stripe privacy policy.

Customer-selected destinations

Your recipients’ mail providers, webhooks and connected agents receive data according to your instructions. They are not selected as Moonemail delivery providers; you must assess their processing locations and terms. Granting an agent email-read access may disclose message content to that agent’s provider.

Changes and further information

Contact al@halyard.studio for provider or location questions before using the service for restricted data. We will update this register when our use of providers changes and notify affected account holders about material changes. We cannot currently provide a complete verified country list for every ancillary provider operation; customers requiring fixed-country commitments need a separate assessment.