QEHSQEHS
Sign inBook a demo

Trust Center

Sub-processors

The third parties we engage to process customer data, and what each one does. We give at least 30 days' notice before adding or replacing a sub-processor — subscribe below to receive those notifications.

Last updated: 2026-04-15 · RSS feed

NamePurposeData categoriesRegionAdded
Amazon Web Services (AWS)Primary cloud hosting, compute, storage (S3), managed Postgres (RDS)Customer content, Account metadata, Operational logsUS, EU (Frankfurt + Dublin), AU (Sydney), UAE, UK, CA — pinned per tenant2026-04-15
CloudflareEdge CDN, DDoS protection, WAF, DNSRequest metadata, IP addressesGlobal edge; customer-content transit only (no at-rest storage)2026-04-15
StripePayment processing and subscription billingBilling contact, Payment instrument (tokenised), Invoice historyUS (global payment network)2026-04-15
Postmark (ActiveCampaign)Transactional email (account, incident, workflow notifications)Recipient email, Message contentUS + EU2026-04-15
SentryError tracking and performance monitoringError payloads, User identifiers (scrubbed)EU + US2026-04-15
DatadogInfrastructure + APM logging and metricsOperational logs, MetricsEU + US2026-04-15
IntercomIn-product support chat and help centerSupport correspondence, User identifiersEU + US2026-04-15
HubSpotMarketing CRM and prospect/lead managementMarketing leads, Sales correspondenceEU + US2026-04-15
OpenAIAI features (summarisation, classification) — Enterprise plan opt-in onlyFeature-specific content (customer opt-in)US — zero-retention API mode2026-04-15
AnthropicAI features (reasoning, extraction) — Enterprise plan opt-in onlyFeature-specific content (customer opt-in)US — zero-retention API mode2026-04-15

Get notified of changes

New sub-processors and replacements are announced at least 30 days before going live. Enter your work email — we'll send a confirmation first, then only the change notifications you asked for.

Prefer machine-readable? Use the RSS feed or email anil@heftyinnovations.com.