Sub-processor list
These are the third parties that may process customer personal data on our behalf, as referenced in the Privacy Policy and the Data Processing Addendum.
| Sub-processor | Purpose | Data processed | Region |
|---|---|---|---|
| Meta Platforms, Inc. | WhatsApp message delivery and receipt (Cloud API) | Phone numbers, message content | US / EU |
| Anthropic, PBC | AI completions, when AI features are enabled | Message content submitted to an agent | US |
| OpenAI, L.L.C. | Embeddings and completions, when configured | Knowledge-base text, message content | US |
| Stripe, Inc. | Subscription billing and payments | Billing contact, payment metadata | US / EU |
Infrastructure
Application hosting, managed Postgres, Redis, and ClickHouse are provided by our cloud infrastructure provider under a data processing agreement. The specific provider and region applicable to your workspace are available on request, and are stated in the DPA where one has been signed.
AI providers
AI sub-processors receive data only when you enable AI features and only for the requests you make. If no AI provider key is configured for your deployment, no data reaches them.
Notice of changes
We will give at least 30 days’ notice before adding a sub-processor that processes customer personal data, to the email address on your account. If you have a signed DPA, the objection process set out there applies.