Legal
Subprocessors
Last updated 15 August 2026.
Everything that can touch customer data, and why. Short on purpose: each one is here because the product cannot work without it.
Always in use
| Provider | What it does | Data it can see | Where |
|---|---|---|---|
| Render Services, Inc. | Runs the application and the managed Postgres database, and holds uploaded files and backups | All workspace data at rest | Hosted in Frankfurt, Germany (EU). Provider is US based |
| Cloudflare, Inc. | Sits in front of the application: TLS termination, routing, protection against attack traffic | Traffic in transit, IP addresses | Global edge network. US based |
| Namecheap (Private Email) | Sends transactional email: verification, password reset, workspace invitations | Recipient address and the content of those emails | US |
| OpenAI, L.L.C. | Generates AI answers, drafts, and analysis when you request them, and converts speech to text when you dictate or upload a call recording, using our provider account | The workspace records relevant to that request, for the duration of the request. For dictation and call analysis, the audio you record or upload and the transcript made from it. The audio is sent for transcription only and is not stored by us | US |
OpenAI and Anthropic both state that data submitted through their APIs is not used to train their models. If you connect your own provider key, AI requests go to your provider under your own contract with them, and our account is no longer involved.
Only when you switch them on
| Provider | Triggered by | Data it can see | Where |
|---|---|---|---|
| Anthropic PBC | Choosing Anthropic as your AI provider | The workspace records relevant to each AI request | US |
| Google LLC | Connecting Gmail, Google Calendar, or Google Docs | Only what the granted scopes cover, for the feature you enabled | US |
| Microsoft Corporation | Connecting an Outlook mailbox | Only what the granted scopes cover, for the feature you enabled | US |
Integrations you contract for yourself
Some integrations run on a key that you supply: enrichment providers such as FullEnrich, and email sequencers such as Smartlead or Instantly. When you paste your key and send data to them, they are your processors, not ours: your agreement with them governs that data, and we simply carry the request you asked for. We list them here so nothing is hidden, not because we hold a contract with them on your behalf.
Changes
Before adding or replacing a subprocessor we give customers at least 30 days' notice by email. If you reasonably object on data protection grounds, you can terminate without penalty, as set out in the DPA.