Subprocessors
Every company that processes your customers' data on our behalf, per region, with what it sees and since when. We announce a new one 30 days before it starts, and you can object.
Your region is set per workspace. Data in the EU list stays in the EU.
| Subprocessor | Purpose | Data it processes | Location | Since |
|---|---|---|---|---|
| Cloud hosting provider (EU) | Hosting, storage and backups | All workspace data, encrypted at rest | Frankfurt, DE | March 2026 |
| AI model provider (EU) | AI agent, Copilot and summaries | Message text and knowledge excerpts, after redaction. Not stored or used for training by the provider. | Frankfurt, DE | March 2026 |
| Email delivery provider | Sending and receiving email | Email addresses, message content | Dublin, IE | March 2026 |
| SMS and voice carrier | SMS escalation steps, phone calls | Phone numbers, call metadata, recordings if enabled | Amsterdam, NL | May 2026 |
| Mobile push services | Push notifications to the agent apps | Device tokens, a short notification preview | Global | March 2026 |
| Payment processor | Billing Gripz customers | Billing contact and payment method. Never your customers' data. | Dublin, IE | March 2026 |
| Error monitoring provider | Crash and error reports | Technical metadata, with message content removed | Frankfurt, DE | June 2026 |
| Translation provider (EU)Announced · not active yet | Live translation in conversations | Message text, only when translation is on | Frankfurt, DE | From 1 November 2026Object by 31 October → |
Change log
- Announced: Translation provider (EU), active from 1 November 2026. Subscribers were emailed.
- Added: Error monitoring provider, EU and US. Announced 1 May 2026.
- Added: SMS and voice carrier, EU and US. Announced 1 April 2026.
How objecting works
If a new subprocessor is a problem for you, tell us before it starts. Your objection opens a ticket with our legal team, and a person replies. If we cannot resolve it, the DPA explains your options, and full export stays available.