Current Sub-Processors
- TikTok Pte. Ltd. — TikTok channel — messages and contact identities on the TikTok accounts you connect. From 19 September 2026.
- Mistral AI SAS — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- xAI Corp. — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- Amazon Web Services, Inc. (Amazon Bedrock) — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- Microsoft Corporation (Azure AI Foundry, Azure OpenAI Service) — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- Cohere Inc. — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- Groq, Inc. — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- Together AI (Together Computer, Inc.) — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- Fireworks AI, Inc. — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- OpenRouter, Inc. — AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed. From 19 September 2026.
- Deepgram, Inc. — Speech processing — transcribing voice notes and call recordings, and generating spoken replies — depending on how requests are routed. From 19 September 2026.
- AssemblyAI Inc. — Speech processing — transcribing voice notes and call recordings, and generating spoken replies — depending on how requests are routed. From 19 September 2026.
- ElevenLabs (Eleven Labs Inc.) — Speech processing — transcribing voice notes and call recordings, and generating spoken replies — depending on how requests are routed. From 19 September 2026.
- PayPal (Europe) S.à r.l. et Cie, S.C.A. — Payment processing where PayPal is offered as a payment method, and partner payouts. From 19 September 2026.
- OpenTable, Inc. — Restaurant reservation integration — receives a contact's name, email and phone to create, change or cancel a booking. From 19 September 2026.
- ZeroBounce (Hertza L.L.C.) — Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed. From 19 September 2026.
- NeverBounce (ZoomInfo Technologies LLC) — Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed. From 19 September 2026.
- Hunter Web Services, Inc. — Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed. From 19 September 2026.
- Apollo.io (ZenLeads Inc.) — Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed. From 19 September 2026.
- IPRoyal Services FZE LLC — Residential and ISP proxies that carry the connection to a platform you connect (WhatsApp Web, LinkedIn) so it comes from a stable, local IP address, depending on how connections are routed. From 19 September 2026.
- Oxylabs (oxylabs, UAB) — Residential and ISP proxies that carry the connection to a platform you connect (WhatsApp Web, LinkedIn) so it comes from a stable, local IP address, depending on how connections are routed. From 19 September 2026.
- Decodo, formerly Smartproxy (UAB Data troops) — Residential and ISP proxies that carry the connection to a platform you connect (WhatsApp Web, LinkedIn) so it comes from a stable, local IP address, depending on how connections are routed. From 19 September 2026.
We require every Sub-processor to be under a data protection agreement meeting GDPR Article 28, and we remain responsible to you for what they do. Where data goes outside the EEA, the safeguards are set out in Section 14 of our Terms.
Messaging
WhatsApp Business API and Cloud API, Instagram Graph API, Messenger
Telegram channel — messages and contact identities on the Telegram accounts you connect
TikTok channel — messages and contact identities on the TikTok accounts you connect
WhatsApp Business API delivery and phone number provisioning. SMS is delivered through your own connected Twilio account, where Twilio is not our Sub-processor
Phone numbers you rent through the app — provisioning the number (your business name and address and, where telecom regulation requires it, identity documents supplied for the order) and the calls and texts received on that number, which we read to complete WhatsApp verification. Numbers you bring from your own Twilio account do not involve Telnyx
Email channel delivery through our own system account, sent from Mailgun's EU region. Where you connect your own Mailgun or SMTP credentials, delivery runs on your account and Mailgun is not our Sub-processor for that traffic
Lifecycle and product email to account holders — your own account email address and subscription events, not your contacts' data
AI
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed; plus Google Cloud services behind the app (Maps and Places lookups, analytics storage) and Calendar and Drive when you connect them
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
AI processing — conversations, helper tasks, transcription, image and video understanding, embeddings and knowledge-base processing — depending on how requests are routed
Speech processing — transcribing voice notes and call recordings, and generating spoken replies — depending on how requests are routed
Speech processing — transcribing voice notes and call recordings, and generating spoken replies — depending on how requests are routed
Speech processing — transcribing voice notes and call recordings, and generating spoken replies — depending on how requests are routed
Payments
Payment processing
Payment processing where PayPal is offered as a payment method, and partner payouts. Where an agency connects its own PayPal account to bill its clients, PayPal is not our Sub-processor for that traffic
Infrastructure
EU dedicated server hosting — our application, database and WhatsApp Web service
CDN, DNS and network protection in front of our websites and API. Traffic passes through Cloudflare in transit. Also provides cookie-free aggregate traffic-source measurement for our public website
Specific Cloud Functions in EU regions
Authentication and file storage in EU regions
Integrations
Third-party integration framework for Custom Functions
Fetches public web pages for knowledge base and FAQ import, and for prospect research in Find Leads
Find Leads — checks whether a prospect's email address is deliverable before it is shown to you
Restaurant reservation integration — receives a contact's name, email and phone to create or cancel a booking
Restaurant reservation integration — receives a contact's name, email and phone to create or cancel a booking
Restaurant reservation integration — receives a contact's name, email and phone to create, change or cancel a booking
Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed
Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed
Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed
Find Leads — checks whether a prospect's email address is deliverable and enriches prospect and company details, depending on how requests are routed
Connectivity
Residential and ISP proxies that carry the connection to a platform you connect (WhatsApp Web, LinkedIn) so it comes from a stable, local IP address, improving connection reliability
Residential and ISP proxies that carry the connection to a platform you connect (WhatsApp Web, LinkedIn) so it comes from a stable, local IP address, depending on how connections are routed
Residential and ISP proxies that carry the connection to a platform you connect (WhatsApp Web, LinkedIn) so it comes from a stable, local IP address, depending on how connections are routed
Residential and ISP proxies that carry the connection to a platform you connect (WhatsApp Web, LinkedIn) so it comes from a stable, local IP address, depending on how connections are routed
Diagnostics
Application error and performance monitoring for our web dashboard. Diagnostic data only, IP anonymised, no session recording. Data is ingested and stored in the EU region; the entity is US-based
Get Notified of Changes
Add your email and we'll tell you 14 days before any new Sub-processor starts handling your data. Nothing else — this list is only ever used for these notices, and you can unsubscribe from any of them.
How Changes Work
You gave us general authorisation to use Sub-processors when you accepted our Terms, so we don't need a new signature each time this list changes. What we owe you instead is notice and a say.
Before a new Sub-processor begins processing your data, we tell you at least 14 days ahead, by email or in-app notice and by publishing it on this page. If you object on reasonable data-protection grounds, we'll work with you to find a commercially reasonable solution. If we can't find one within 30 days, you can terminate the affected Services without penalty.
This is set out in full in Section 14 of our Terms of Service, which is also our Data Processing Agreement. If you need a counter-signed copy for a compliance review, you can download one here.
Reach our team at hi@dmchamp.com and we will respond within two business days.