Back to Legal Center
Official
List of Subprocessors
Last updated: March 1, 2026Official
Current product subprocessors (entities that process personal data on Asystio's behalf):
Infrastructure & platform:
- Google Cloud / Firebase (hosting, authentication, storage, App Check) — EU region
- Firebase Data Connect (application data layer) — EU region
AI:
- Google Vertex AI / Gemini (AI processing; PII workloads in europe-west4)
- Anthropic Claude via Google Vertex AI partner models (premium reasoning, EU endpoint; covered by Google's processing terms)
Communications:
- Infobip (transactional SMS, 2FA, voice)
- Resend (transactional email; transfer outside EEA on SCC basis)
- ElevenLabs (voice synthesis/transcription for the AI receptionist; standard endpoint, transfer outside EEA on SCC basis)
Payments:
- Autopay (payment operator being implemented for integration-covered checkout paths; production-active status after live confirmation and DPA/processing terms confirmation)
- Stripe (legacy/migration payment paths; transfer outside EEA on SCC basis)
Product analytics & observability:
- PostHog EU (product analytics, masked session replay) — EU
- Sentry EU (error/performance monitoring) — EU ingest
Planned (not yet live): OpenAI (GPT) via Azure OpenAI — will be added once configured for an EU region with a DPA in place.
Note: tools used privately for software development (e.g. AWS, IDE coding assistants) do not process tenant or end-user data and are not product subprocessors.
Active subprocessors
| Provider | Status | Region | EEA transfer | Purpose |
|---|---|---|---|---|
| Google Cloud / Firebase | active | EU-first; project services configured for EU where supported | no-by-default | Hosting, authentication, storage, App Check and platform services. |
| Firebase Data Connect | active | europe-central2 | no-by-default | SQL/Data Connect application data layer. |
| Vertex AI / Gemini | active | europe-west4 for PII/core workloads | no-by-default | AI processing for Asystio product features. |
| Infobip | active | EU data centre where available | depends-on-region | Transactional SMS, 2FA codes, and voice/number lookup (platform-funded, central account). |
| Resend | active | provider infrastructure (US-based) | yes | Transactional email delivery (platform-funded, central account). |
| ElevenLabs | active | standard/global endpoint (NOT EU-residency) | yes | Voice I/O for the AI receptionist: text-to-speech, optional speech-to-text, conversation transport. |
| PostHog EU | active | EU | no-by-default | Product analytics, masked session replay and /mirror surveys. |
| Sentry EU | active | EU ingest | no-by-default | Error and performance observability. |
| Anthropic (Claude) via Google Vertex AI | active | europe (served through Google Vertex AI partner models, EU endpoint) | no-by-default | Premium deep-reasoning model (Claude Opus), offered to users who need it; gated/feature-flagged. |
| Autopay | implementing | Poland/EU | no-by-default | Payment processing for checkout paths covered by the Autopay rollout, including card and subscription payment metadata. |
| Stripe | legacy/migration | Stripe infrastructure | yes | Legacy/migration payment paths, selected self-service payments and top-ups while active Stripe links and processes exist. |
