Legal
Subprocessors
Last updated 22 August 2026
These are the third parties that process customer data on our behalf. Customers can subscribe to change notifications at [email protected] and have thirty days to object to any addition.
| Subprocessor | Purpose | Location | Transfer basis |
|---|---|---|---|
| Hetzner Online | Primary compute and storage | Germany, Finland | EEA |
| Cloudflare | CDN, DNS and DDoS protection | Global edge | SCCs |
| Amazon Web Services | Object storage for archives and snapshots | eu-central-1 | EEA |
| Anthropic | Model inference for summarisation and drafting | European Union | SCCs |
| Stripe | Payment processing | Ireland, United States | SCCs |
| Postmark | Transactional email | United States | SCCs |
| Sentry | Error monitoring, scrubbed of message content | European Union | EEA |
Model inference
Customer content sent for inference is not retained by the provider for training. Enterprise customers may route inference to their own provider account or to a self-hosted model, in which case no content reaches a third party model provider at all.
Messaging networks
The networks themselves are not subprocessors. They are the source systems the customer already uses, and CommunicationOS connects to them on the customer's authority through each network's own interface.