Sub-processors
August AI uses the following third-party sub-processors to deliver the Service. Each sub-processor is bound by a written contract incorporating data protection obligations equivalent to those in our Data Processing Agreement.
Last updated: 18 May 2026
30-day change notification. Per Section 3.4 of our DPA, we notify Controllers at least 30 days before adding or replacing a sub-processor. Subscribe to updates by emailing dpa@augusttech.io.
| Sub-processor | Country | Role | Safeguard |
|---|---|---|---|
| Cloudflare, Inc. / Cloudflare Workers Ltd | UK + global edge (UK contracting entity for UK/EEA) | Application hosting (Cloudflare Workers), CDN, WAF, DDoS mitigation | UK/EU contracting entity; SCCs + UK Addendum for any US onward leg |
| Neon Inc. | Database compute + storage: eu-west-2 (London). Control plane: US | Primary operational database (Postgres) for tenant data | SCCs (Module 3) for US control-plane component; eu-west-2 data residency |
| WhatsApp Ireland Limited (Meta) | Ireland + Meta global infrastructure | WhatsApp Business Cloud API messaging transport | Meta's SCCs + Additional Safeguards Addendum |
| Anthropic, PBC | United States | AI inference for briefing summarisation and reply parsing | SCCs (Module 3), zero-retention API mode where supported |
| OpenAI, OpCo, LLC | United States | AI inference (fallback / specific model surfaces) | SCCs (Module 3), zero-retention API mode where supported |
| HubSpot, Inc. | United States (or EU region if Controller selected) | Controller's own CRM (where Controller has connected HubSpot) | Controller's own DPA with HubSpot governs |
| Zoho Corporation | India / EU / US per Controller data-residency selection | Controller's own CRM (alternative to HubSpot) | Controller's own DPA with Zoho governs |
| Stripe Payments Europe Ltd | Ireland | Subscription billing, payment processing | Separate Controller for payment-card data under Stripe privacy notice |
| Resend, Inc. | United States | Transactional email (account, billing, alert emails). No CRM data | SCCs (Module 3) |
Cloudflare, Inc. / Cloudflare Workers Ltd
- Country
- UK + global edge (UK contracting entity for UK/EEA)
- Role
- Application hosting (Cloudflare Workers), CDN, WAF, DDoS mitigation
- Safeguard
- UK/EU contracting entity; SCCs + UK Addendum for any US onward leg
Neon Inc.
- Country
- Database compute + storage: eu-west-2 (London). Control plane: US
- Role
- Primary operational database (Postgres) for tenant data
- Safeguard
- SCCs (Module 3) for US control-plane component; eu-west-2 data residency
WhatsApp Ireland Limited (Meta)
- Country
- Ireland + Meta global infrastructure
- Role
- WhatsApp Business Cloud API messaging transport
- Safeguard
- Meta's SCCs + Additional Safeguards Addendum
Anthropic, PBC
- Country
- United States
- Role
- AI inference for briefing summarisation and reply parsing
- Safeguard
- SCCs (Module 3), zero-retention API mode where supported
OpenAI, OpCo, LLC
- Country
- United States
- Role
- AI inference (fallback / specific model surfaces)
- Safeguard
- SCCs (Module 3), zero-retention API mode where supported
HubSpot, Inc.
- Country
- United States (or EU region if Controller selected)
- Role
- Controller's own CRM (where Controller has connected HubSpot)
- Safeguard
- Controller's own DPA with HubSpot governs
Zoho Corporation
- Country
- India / EU / US per Controller data-residency selection
- Role
- Controller's own CRM (alternative to HubSpot)
- Safeguard
- Controller's own DPA with Zoho governs
Stripe Payments Europe Ltd
- Country
- Ireland
- Role
- Subscription billing, payment processing
- Safeguard
- Separate Controller for payment-card data under Stripe privacy notice
Resend, Inc.
- Country
- United States
- Role
- Transactional email (account, billing, alert emails). No CRM data
- Safeguard
- SCCs (Module 3)
Questions?
For questions about our sub-processors, our DPA, or a security review pack, contact dpa@augusttech.io.
August Tech Ltd · Companies House 16843633 · Incorporated 10 November 2025 · Registered office: 112 Trent Gardens, London, England, N14 4QN · SIC 62090.