Sub-processors
Last updated 12 June 2026 · Effective 3 June 2026
To provide GG we use the third-party providers ("sub-processors") below. Each is bound by a data-processing agreement with obligations at least as protective as our own Data Processing Addendum. We update this page before adding or replacing a sub-processor.
Current sub-processors
| Provider | Service | Data processed | Location |
|---|---|---|---|
| IONOS SE | Cloud hosting, database & nightly backups | All Customer Data at rest | EU (Germany / UK) |
| Anthropic, PBC | AI summarisation, intent classification and enrichment evaluation (Claude) | Communication content and client data sent at request time to generate output; not used to train models | USA / EU |
| Nylas, Inc. | Email mailbox connection & inbound message sync | Email metadata and content from connected mailboxes | EU |
| Resend | Transactional & invite email delivery | Recipient email, name and message content | USA / EU |
| Stripe Payments Europe | Subscription billing & payments | Billing contact, plan, payment-method tokens (card data handled by Stripe) | USA / EU |
| Sentry (Functional Software, Inc.) | Application error monitoring | Error reports with limited request metadata (no message content) | USA / EU |
Planned / activated when you connect a channel
The following are used only if your workspace enables the relevant live communication channel. Until you connect a channel, no data flows to them.
| Provider | Service | Data processed | Location |
|---|---|---|---|
| Twilio | WhatsApp & voice connectivity | Phone numbers, message and call metadata/content | USA / EU |
| Deepgram | Call transcription | Call audio for transcription | USA |
| OpenCorporates | Non-EU company-registry enrichment | Company names/identifiers queried for enrichment | EU / UK |
Public data sources (not sub-processors)
- EU VIES — VAT number validation and EU company details.
- Public web & registries — used for confirm-before-save client enrichment; we read public information, we do not send your Customer Data to them.
Change notices
To be notified of changes to this list, email legal@taskgg.com and ask to be added to our sub-processor notification list. Under the DPA you may object to a new sub-processor on reasonable data-protection grounds.
Provided for transparency, not legal advice. Keeping this list accurate is a GDPR obligation — confirm each vendor’s processing location and that a signed DPA is in place, and have counsel review it before final launch.