Trust Center
Subprocessors
Third-party organizations that may process data on behalf of Winston & Miller in connection with delivering our services and operating the platform. FedRAMP authorization status is stated honestly.
FedRAMP note: Where a subprocessor holds FedRAMP authorization, the authorization applies to specific service offerings, not the provider as a whole. Always verify the authorization status of the specific services in use directly with the provider or through the FedRAMP Marketplace. Winston & Miller does not claim FedRAMP authorization for the platform.
| Subprocessor | Purpose | Location | Data classes | FedRAMP status |
|---|---|---|---|---|
| 25 Alpha LLC | Platform hosting and operations | AWS us-east-1 (Northern Virginia) | Platform application data; audit logs; configuration data | Not claimed |
| Amazon Web Services (AWS) | Cloud infrastructure | us-east-1 (Northern Virginia) | Infrastructure layer — compute, storage, networking, key management | FedRAMP authorized (specific services; verify per service) |
| Email delivery provider | Transactional email delivery | United States | Recipient email address; notification content (no assessment data) | Not claimed |
| E-signature provider | Electronic document signing | United States | Signer name; email address; signature image; document metadata | Not claimed |
| Telephony provider | Voice and SMS communications | United States | Phone number; message content for notifications | Not claimed |
This list is updated when subprocessors are added, changed, or removed. Clients with questions about a specific subprocessor may contact jessica@winstonandmiller.com.
Related trust resources