About this page
Fleet Service 365, Inc. ("FS365," "we," "us") engages a small number of third-party service providers to help us deliver and support our SaaS platform, telematics hardware, mobile applications, and related services (the "Services"). Some of these providers may Process Personal Data on our behalf in the course of providing their services to us. We refer to these providers as "Subprocessors."
This page is the authoritative, current list of FS365's Subprocessors. It is referenced from and forms part of our Data Processing Addendum (DPA). The DPA describes the contractual safeguards we put in place with each Subprocessor, including obligations no less protective than those we owe to our customers.
We review this page regularly and update it whenever a Subprocessor is added, removed, or materially changed.
How to be notified of changes
We provide at least thirty (30) days' written notice before engaging a new Subprocessor that will Process customer Personal Data.
Use the subject line "Subscribe — Subprocessor Updates" and include the email address(es) you'd like added to the notification list. Subscribers receive an email whenever this page is materially updated, including the nature of the change and the effective date.
How to object to a new Subprocessor
Customers may object to FS365's engagement of a new Subprocessor on reasonable grounds relating to data protection by emailing privacy@fleetservice365.com within the 30-day notice period. We will work with you in good faith to resolve the objection.
If we cannot reasonably accommodate the objection, you may, as your sole and exclusive remedy, terminate the affected portion of the Services for convenience and receive a pro rata refund of any prepaid, unused fees, as set out in Section 5.4 of our DPA.
Core Subprocessors
These Subprocessors Process customer Personal Data directly in the course of providing the Services.
| Subprocessor | Purpose / Processing activity | Categories of Personal Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Microsoft Corporation (Microsoft Azure) | Cloud infrastructure hosting, storage, compute, and managed database services for the Services. | All categories of customer Personal Data submitted to the Services. | United States (with optional EU regions for eligible customers) | EU SCCs / EU-US Data Privacy Framework |
| Google LLC (Google Analytics) | Website and product analytics; aggregated usage measurement and conversion tracking. | IP address (truncated where configured), device identifiers, browser type, page-view and event data, approximate geolocation. | United States | EU SCCs / EU-US Data Privacy Framework |
| Postmark (ActiveCampaign, LLC) | Transactional email delivery (account, security, billing, and product notifications). | Email address, name, message metadata, message content. | United States | EU SCCs |
| Telematics hardware partner | Vehicle telematics data ingestion, device provisioning, firmware management. | Vehicle GPS location, sensor data linked to driver/vehicle, vehicle identifiers. | United States | Not applicable (US-only data) — to be confirmed |
| Microsoft Corporation (Microsoft Dynamics 365) | Customer support ticketing, case management, and knowledge-base search. | Name, email, support correspondence, account metadata. | United States | EU SCCs / EU-US Data Privacy Framework |
| Microsoft Corporation (Azure Application Insights) | Application performance monitoring, error tracking, and observability. | User ID, IP address, device info, error context. | United States | EU SCCs / EU-US Data Privacy Framework |
| Microsoft Corporation (Microsoft Power BI) | Internal analytics and reporting (pseudonymized where feasible). | All categories of customer Personal Data (pseudonymized where feasible). | United States | EU SCCs / EU-US Data Privacy Framework |
Entries marked Pending are awaiting final legal sign-off. The current vendor is in place; the public listing will be updated once the named entity is confirmed.
Independent Controllers
These third parties are not Subprocessors of FS365. They act as independent Controllers of certain Personal Data they receive in connection with the Services, and their Processing of that data is governed by their own terms and privacy policies.
| Provider | Purpose | Why independent Controller |
|---|---|---|
| Stripe, Inc. | Payment processing and subscription billing. | Stripe processes billing and payment-method data as an independent controller for KYC/AML, fraud prevention, and financial reporting purposes. |
Infrastructure Subprocessors
These providers support the underlying infrastructure of the Services but do not access customer Personal Data in any meaningful or routine way. They are listed for transparency.
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Corporation (Azure Front Door) | CDN, DDoS protection, web application firewall, and global HTTP load balancing. | Global edge network |
| Email authentication / deliverability tool | SPF/DKIM/DMARC monitoring and inbox-deliverability analytics. | United States |
FS365 Affiliates
The following FS365 affiliates may Process customer Personal Data in support of the Services. Each affiliate is contractually bound by data protection obligations no less protective than those in the DPA.
| Affiliate | Role | Location |
|---|---|---|
| Craftware Technologies, LLC | Parent company of FS365. Provides customization and infrastructure services to Customers on an as-needed basis. | Sugar Land, Texas, United States |
Change log
Material updates to this page are recorded below, in reverse chronological order.
| Date | Change |
|---|---|
| 2026-05-16 | Initial publication of the Subprocessor list (Version 1.0). |
Contact
Questions about this page, our Subprocessors, or our data protection practices can be sent to:
- Email: privacy@fleetservice365.com
- Subscribe to update notifications: legal@fleetservice365.com
Document control
| Field | Value |
|---|---|
| Document title | Subprocessors |
| Version | 1.0 |
| Last updated | May 16, 2026 |
| Owner | FS365 Privacy Officer — privacy@fleetservice365.com |
| Review cadence | Reviewed whenever a Subprocessor is added, removed, or materially changed; otherwise at least quarterly. |