Subprocessors
Authorised sub-processors
Sub-Processor List
|
Sub-Processor |
Description |
Purpose |
Data subjects |
Location & transfer mechanism |
|
Intercom |
Communication interface / chatbot for support enquiries. |
Customer Service |
Users & CLIENT |
55 2nd Street, 4th Floor, San Francisco, CA 94105, USA. SCCs in place (intercom.com/legal/data-processing-agreement). EU migration intended. |
|
Google (Google Ireland Ltd.) |
Cloud hosting of the application; flexible scaling and worldwide availability. |
Data storage & management |
CLIENT & Users |
Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (EU region). |
|
MongoDB |
Cloud-hosted databases for faster data processing and access. |
Managed database-as-a-service |
CLIENT & Users |
MongoDB Inc., Building Two, Number One Ballsbridge, Dublin 4, Ireland (EU region). |
|
Google & Microsoft |
State-of-the-art speech models across many languages. |
Speech-to-Text |
Users |
Google Ireland Ltd., Dublin; Microsoft Ireland, One Microsoft Place, Dublin D18 P521, Ireland (EU regions). |
|
Microsoft |
Summarises spoken content and matches it to response categories for feedback. |
Text analysis |
CLIENT & Users |
Microsoft Ireland, One Microsoft Place, Dublin D18 P521, Ireland (EU region). |
|
Microsoft Corporation (US) |
AI infrastructure (Azure OpenAI Service). Transient failover processing only, where EU/EEA regions are unavailable or at capacity (see §2(3), §5.4). |
Speech-to-Text / Text analysis (failover) |
Users / CLIENT |
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Transfer mechanism: EU SCCs (Commission Decision 2021/914), processor-to-processor module, per the Microsoft Products and Services DPA. Microsoft EU Data Boundary applies by default. |
|
Google LLC (US) |
AI infrastructure (Google Cloud Vertex AI). Transient failover processing only, where EU/EEA regions are unavailable or at capacity (see §2(3), §5.4). |
Speech-to-Text / Text analysis (failover) |
Users / CLIENT |
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Transfer mechanism: EU SCCs (Commission Decision 2021/914) and/or EU–U.S. Data Privacy Framework, per the Google Cloud Data Processing Addendum (CDPA). |
|
Sendgrid (Twilio) |
Automated emails (registration, invitations, password reset / double opt-in). |
Email registration / password |
Users & CLIENT |
1801 California Street, Suite 500, Boulder, CO 80202, USA. DPA with Twilio incorporating SCCs. EU migration intended. |
|
Sentry |
Tracks system failures and exceptions. |
Exception detection & bug fixing |
Users & CLIENT |
132 Hawthorne St, San Francisco, USA. DPA in place covering SCCs (sentry.io/legal/dpa). EU migration intended. |
|
Hotjar |
Insight into software blockers to improve the experience. |
User experience & behaviour |
Users & Customers |
Hotjar Ltd, Dragonara Business Centre, St Julian's STJ 3141, Malta (EU). |
|
Anam |
Provision of virtual avatars. |
Virtual avatars |
Users & Customers |
ANAM.AI LTD (no. 15214363), Fora, White Collar Factory, Old Street Yard, London EC1Y 8AF, UK. UK adequacy applies. |
|
Xirsys |
Persistent connection enabling dynamic conversations. |
Latency of dynamic conversations |
Users & Customers |
25350 Magic Mountain Parkway, Suite 300, Santa Clarita, CA 91355, USA. SCCs in place. |
|
Grafana Labs |
Detects errors during operation. |
Customer Service |
Users & Customers |
Grafana Labs, Potsdamer Platz 10, Haus 2, 10785 Berlin, Germany (EU). |


