Pipeline & Proposals
Project Management
Resource Planning
Time & Costs
WIP & Invoicing
Commercial Reporting
Consulting Engineers
Architects
Town Planners
Building Designers
Subprocessors
Last updated: 19 July 2026
About this list
Drum Software Inc. (“Drum”) uses the service providers below to process Customer Data or identifiable account information on Drum’s behalf when providing the Drum application and related services. The information a provider receives depends on the features a Customer uses. Website advertising, embedded-content and similar providers are described separately in our Cookies Policy.
Drum’s core production application, databases, caches and file storage are hosted in Sydney, Australia. Some providers operate globally and may process information outside Australia, including in the United States and other countries in which they or their subprocessors operate.
Current subprocessors
| Provider | Purpose | Information involved | Processing context |
|---|---|---|---|
| DigitalOcean | Application, database, cache and file hosting; container registry | Customer Data, account data, files, application and service data | Core production hosting in Sydney, Australia |
| Cloudflare | Network proxying, load balancing, security and performance | Network requests, IP addresses, request metadata and service traffic | Global network |
| Drum-managed assisted onboarding and imports using Google Sheets and related services; website analytics | Customer-provided import data, account and connection data, and website usage information | May be processed outside Australia | |
| Stripe | Subscription billing, payment processing and fraud prevention | Billing contacts, payment and transaction information, and fraud signals | May be processed outside Australia |
| Postmark | Inbound email processing and outbound transactional email delivery | Email addresses, message content, attachments and delivery metadata | May be processed outside Australia |
| Bento | Onboarding and lifecycle communications | User contact details, account information, onboarding progress and subscription status | May be processed outside Australia |
| Intercom | Customer support, chat and service communications | User and account details, support communications and related service context | May be processed outside Australia |
| OpenAI | Optional AI-assisted extraction and structuring features | Content a User submits to an AI-assisted feature, including selected emails, receipts, invoices, spreadsheets and documents | May be processed outside Australia |
| PostHog | Product analytics and, where enabled, session recording | User, account, feature-usage, interaction and device information | May be processed outside Australia |
| Rollbar | Error monitoring and diagnostics | Error, request, device and diagnostic information | May be processed outside Australia |
| Scout APM | Application performance monitoring | Application performance, request and diagnostic information | May be processed outside Australia |
Customer-directed services
A Customer or User may choose to connect Drum to services such as Google, Microsoft, Xero, MYOB or QuickBooks, or configure an API client or webhook destination. When acting solely on a Customer’s direction, these recipients are not Drum-selected subprocessors. The Customer is responsible for authorising the connection and assessing the recipient’s handling of Customer Data.
Changes to this list
We may update this list as our providers or Services change. We will update the date above and, where required by contract or applicable law, provide additional notice of a material change.
For questions about this list or Drum’s data-management practices, contact support@getdrum.com. See our Privacy Policy and Data Management and Security summary for more information.