Subprocessors
The following providers process personal data of App users and meeting content on our behalf. This list is identical to Annex 2 of our Data Processing Agreement and is maintained together with it; customers are informed of changes as set out in the DPA.
Current subprocessors
Subprocessor (Name & Address) | Purpose of Service | Server Location | Data Transfer to Third Countries (Legal Basis) |
|---|---|---|---|
Better Stack, Inc., 651 N Broad St., Suite 206, Middletown, DE 19709, USA | Observability platform for uptime monitoring, incident management, and log aggregation. | European Union | Processing and storage take place in the EU. For exceptional cases (e.g., access from the United States), SCCs (Art. 46 GDPR). |
Clay Labs Inc., 119 N 11th Street, 3C, Brooklyn, NY 11249, USA | Data enrichment and outbound automation platform for building prospect lists from multiple data sources. | United States | Processing and storage take place in the United States. SCCs (Art. 46 GDPR). |
Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA | Content delivery network (CDN) and edge platform for DNS, DDoS protection, and web security. | European Union | Processing and storage take place in the EU. For exceptional cases (e.g., access from the United States), SCCs (Art. 46 GDPR). |
Google Cloud Platform (Google Cloud EMEA Limited), 70 Sir John Rogerson's Quay, Dublin 2, Ireland | Cloud computing platform providing infrastructure, platform, and machine learning services (IaaS/PaaS). | European Union | Processing and storage take place in the EU. For exceptional cases (e.g., access from the United States), EU-US DPF (Art. 45 GDPR) and additionally SCCs (Art. 46 GDPR). |
Google Workspace (Google Cloud EMEA Limited), 70 Sir John Rogerson's Quay, Dublin 2, Ireland | Productivity and collaboration suite providing email, calendar, documents, storage, and video conferencing. | Global (EU data regions configurable) | Data may be processed globally unless EU data regions are enabled. For transfers to the United States, EU-US DPF (Art. 45 GDPR) and additionally SCCs (Art. 46 GDPR) under the Cloud Data Processing Addendum. |
Astrodon Corporation (Loops), 9450 SW Gemini Dr, PMB 22902, Beaverton, OR 97008, USA | Email marketing platform for SaaS companies for sending campaigns, sequences, and transactional email. | United States | Processing and storage take place in the United States. EU-US DPF (Art. 45 GDPR) and additionally SCCs (Art. 46 GDPR). |
Modal Labs, Inc., 233 Spring Street, Floor 11, New York, NY 10013, USA | Serverless compute platform for running Python workloads such as AI inference and batch jobs in the cloud. | European Union | Processing and storage take place in the EU. For exceptional cases (e.g., access from the United States), SCCs (Art. 46 GDPR). |
OneSignal, Inc., 201 S. B Street, Suite 200, San Mateo, CA 94401, USA | Customer engagement platform for sending push notifications, in-app messages, email, and SMS across web and mobile apps. | European Union (Netherlands) | Processing and storage take place in the EU (Netherlands). For exceptional cases (e.g., access from the United States), EU-US DPF (Art. 45 GDPR) and additionally SCCs (Art. 46 GDPR). |
Forge Technology, Inc. (Paragon), 10900 Wilshire Blvd, Suite 440, Los Angeles, CA 90024, USA | Embedded integration platform (iPaaS) for shipping native third-party integrations inside a SaaS product. | European Union | Processing and storage take place in the EU. For exceptional cases (e.g., access from the United States), SCCs (Art. 46 GDPR). |
Not Just Tickets Ltd (Plain), 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdom | Customer support platform for B2B companies with shared inbox and API-first workflows. | United Kingdom / EEA | Processing and storage take place in the UK and EEA. UK Adequacy Decision (Art. 45 GDPR); SCCs (Art. 46 GDPR) for onward transfers to US sub-processors. |
PlanetScale, Inc., 535 Mission Street, 14th Floor, San Francisco, CA 94105, USA | Managed database platform providing serverless MySQL and Postgres with branching workflows. | European Union | Processing and storage take place in the EU. For exceptional cases (e.g., access from the United States), EU-US DPF (Art. 45 GDPR) and additionally SCCs (Art. 46 GDPR). |
Functional Software, Inc. (d/b/a Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA | Application monitoring platform for error tracking, crash reporting, and performance tracing. | European Union | Processing and storage take place in the EU. For exceptional cases (e.g., access from the United States), SCCs (Art. 46 GDPR). |
Soniox Inc., 1045 Helm Lane, Foster City, CA 94404, USA | Speech recognition API for real-time and batch speech-to-text transcription. | European Union | Processing and storage of customer data take place exclusively in the EU. Limited system data (account metadata, operational logs, service telemetry) may be processed outside the EEA; where applicable, SCCs (Art. 46 GDPR). |
Nest 22, Inc. (d/b/a Superwall), 2093 Philadelphia Pike #5307, Claymont, DE 19703, USA | Paywall management platform for building, testing, and optimizing in-app subscription paywalls on mobile apps without shipping app updates. | United States | Processing and storage take place in the United States. SCCs (Art. 46 GDPR). |
WorkOS, Inc., 548 Market Street, PMB 86125, San Francisco, CA 94104, USA | Authentication and identity API platform for adding enterprise features like single sign-on (SSO) and SCIM to SaaS applications. | United States | Processing and storage take place in the United States. SCCs (Art. 46 GDPR). |