Subprocessors
These are the categories of third parties that may process data on our behalf. Businesses that require a signed data processing agreement should request one before going live.
This document is a draft written by the platform operator. It is not legal advice and has not been reviewed by a lawyer. Nothing on this page claims that the platform, or any business using it, is legally compliant.
Categories in use
Which of these apply depends on the features a business enables.
- Cloud hosting and managed Postgres database, authentication and file storage.
- AI model providers used to generate message drafts, website copy and call scripts.
- Transactional and marketing email delivery, including bounce and complaint handling.
- SMS delivery.
- Payment processing and subscription billing.
- Advertising platforms, where a business connects them.
- Error monitoring and operational logging.
Changes
We will update this list when providers change. Businesses with a data processing agreement in place should be given notice of material changes.
Data processing agreements
A DPA covering processing scope, security measures, subprocessor notice, international transfers and deletion is required for many business customers. This must be prepared and reviewed by counsel before it is offered.