These are the third parties that process customer personal data on our behalf, under our Data Processing Addendum. Each is bound by written data protection terms. Third-party sources and endpoints that the Service queries to run your checks (such as blocklist operators) aren't subprocessors; see Section 9 of our DPA.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosting, databases, storage, backups, and email delivery | United States, Canada |
| Stripe, Inc. | Card payments | United States |
| PayPal, Inc. | PayPal payments | United States |
| Twilio Inc. | SMS alerts and phone number validation | United States |
| Google LLC | reCAPTCHA bot protection on forms | United States |
Integrations you turn on yourself (Google and Microsoft sign-in, Slack, Telegram, webhooks, Google Postmaster Tools, Microsoft SNDS) aren't subprocessors. We exchange data with them on your instruction.
Change Notices
We give at least 30 days' notice before a new subprocessor starts processing customer personal data. Notices go to every account owner. To get them at another address, email legal@generatorlabs.com. If we must replace a subprocessor urgently for security or continuity, we'll give as much notice as we can.