Legal
Sub-processors
The categories of company that help us run the service, and how to get the current list.
Last updated 14 September 2026
We use other companies to provide parts of the service. Each acts on our instructions under written terms no less protective than our Data Processing Addendum, and none may use your data for its own purposes. This page is the list referred to in section 5 of that addendum.
Why this page names categories
The current list, naming each company, is given to any customer or prospective customer who asks for it at [email protected]. It is not published here.
Published, the list is a map: it says which supplier to approach to reach your data without coming through us, and it says so to everybody rather than to the people who have a reason to ask. The same list handed to somebody assessing us does the whole job with none of that. So it is available on request, and available quickly.
Always used
These are involved in running the service for every customer.
| What it does | Personal data it touches |
|---|---|
| Cloud hosting and database | All workspace data |
| Object storage for uploads, exports and backups | Files your team uploads, exported records, backups |
| Transactional email | Name and email address of recipients |
| Logging and monitoring | Technical logs, which may contain identifiers |
Used when you turn the feature on
These are involved only if your workspace uses the feature.
| Feature | What reaches the provider |
|---|---|
| WhatsApp and SMS messaging | Phone numbers, message content both directions, delivery reports |
| Mobile money payment requests | Payer phone number, amount, reference, result |
| AI features | The content sent for a given AI task |
| Sign in with a third-party account | Name, email address, profile picture |
About the AI providers
Content sent for an AI task is sent to produce a result for the person who asked, and comes back to them. It goes under terms that forbid the provider using it to train its models, and it is not kept by them beyond what those terms allow for abuse monitoring.
Before anything is sent, identifiers we can detect are removed and restored afterwards, so what the provider sees carries less about the person than what you see. That reduces exposure rather than eliminating it. Assume note and message content reaches a provider.
If you would rather nothing left your workspace for AI processing at all, AI features can be turned off for a workspace. Ask and we will do it.
About messaging and payments
A message necessarily reaches the network carrying it, and a payment request necessarily reaches the payment provider. Those companies handle that data under their own terms with you as well as with us, and their retention is theirs rather than ours.
Changes
When a sub-processor changes, we tell customers at least 30 days beforehand, with the name of the company joining or leaving. Section 5 of the addendum covers what you can do if you object.
Contact
[email protected], for the current list or an objection to a change.