| Third party subprocessor | Scope and purpose of processing | Categories of personal data | Processing (and storage) locations (e.g. country) |
|---|---|---|---|
| Intercom Inc. | Customer support requests | None, but support ticket could reference customer data | USA |
| Cloudflare Inc. | Content delivery and internet security | See Annex I and II Standard Contractual Clauses | USA |
| Census Inc. | Custom events integration and Data Lake Provider | See Annex I and II Standard Contractual Clauses | USA |
| Google Inc. UPDATED | Cloud hosting; OneSignal AI feature inference via Gemini Enterprise Agent Platform (GEAP); AI conversation quality review and logging via Google BigQuery (retained up to 90 days) | See Annex I and II Standard Contractual Clauses | Netherlands (europe-west4); USA |
| Rollbar Inc. | Product bug tracking | Looks for bugs in product – Doesn't typically process customer data | USA |
| Filestack Inc. | Upload files into API | See Annex I and II Standard Contractual Clauses | USA |
| Mailgun Inc. | Email delivery provider | See Annex I and II Standard Contractual Clauses | USA |
| Twilio Inc. | SMS/MMS delivery provider | See Annex I and II Standard Contractual Clauses | USA |
List of subprocessors
Last Updated: June 2, 2026