Sub-processors
Effective 14 October 2026
These providers process personal data on Salesling’s behalf. This page is Annex 3 of our Data Processing Agreement; we notify workspace owners by email at least 30 days before adding or replacing one.
Draft — company details pending
This document is a draft. Some company details are still being completed (5 outstanding). Until then, contact us through your account.
Current sub-processors
Supabase, Inc.Database, authentication, file storage and the serverless functions that run the agentsData: All Customer DataLocation: EU — Frankfurt, Germany (AWS eu-central-1)Safeguard: Data stored in the EU; SCCs for support access from outside the EU
Vercel, Inc.Hosting and delivery of the web applicationData: Account data and Customer Data displayed in the app, request logsLocation: Global edge network (United States headquarters)Safeguard: SCCs
Anthropic, PBCAI model inference: screening, qualification, reply and Touch writing, web research on Prospects' companiesData: Lead and Prospect messages and contact details, knowledge-base excerpts, public web contentLocation: United StatesSafeguard: SCCs; inputs and outputs are not used to train models
Voyage AI (MongoDB, Inc.)Text embeddings for knowledge-base searchData: Knowledge-base content (your website and documents); search queries derived from messagesLocation: United StatesSafeguard: SCCs
Hetzner Online GmbHServers that read companies' public web pages for the Company Index and check whether email addresses accept mail (no email is sent from them)Data: Names, job titles and business email addresses published on company websites; Prospect addresses being checkedLocation: EU — Falkenstein, GermanySafeguard: Data stays in the EU
Resend (Plus Five Five, Inc.)Transactional notification emails to account users (never Touches or replies to Leads)Data: Account users' names and email addresses, notification contentLocation: United StatesSafeguard: SCCs
Stripe, Inc. / Stripe Payments Europe, Ltd.Subscription billing, invoicing, tax calculation, usage meteringData: Billing contact, company and tax details, payment method, metered usage counts (conversation identifiers only)Location: United States and EUSafeguard: SCCs
| Provider | Purpose | Personal data | Location | Safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage and the serverless functions that run the agents | All Customer Data | EU — Frankfurt, Germany (AWS eu-central-1) | Data stored in the EU; SCCs for support access from outside the EU |
| Vercel, Inc. | Hosting and delivery of the web application | Account data and Customer Data displayed in the app, request logs | Global edge network (United States headquarters) | SCCs |
| Anthropic, PBC | AI model inference: screening, qualification, reply and Touch writing, web research on Prospects' companies | Lead and Prospect messages and contact details, knowledge-base excerpts, public web content | United States | SCCs; inputs and outputs are not used to train models |
| Voyage AI (MongoDB, Inc.) | Text embeddings for knowledge-base search | Knowledge-base content (your website and documents); search queries derived from messages | United States | SCCs |
| Hetzner Online GmbH | Servers that read companies' public web pages for the Company Index and check whether email addresses accept mail (no email is sent from them) | Names, job titles and business email addresses published on company websites; Prospect addresses being checked | EU — Falkenstein, Germany | Data stays in the EU |
| Resend (Plus Five Five, Inc.) | Transactional notification emails to account users (never Touches or replies to Leads) | Account users' names and email addresses, notification content | United States | SCCs |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Subscription billing, invoicing, tax calculation, usage metering | Billing contact, company and tax details, payment method, metered usage counts (conversation identifiers only) | United States and EU | SCCs |
SCCs = the European Commission’s Standard Contractual Clauses (Decision (EU) 2021/914).
Services you connect
When you connect one of these to your workspace, Salesling exchanges data with your own account there. They are your providers under your own agreement with them, not our sub-processors.
- Google Workspace (Gmail, Google Calendar) — Sending Touches and replies from your mailbox, reading replies, booking meetings
- Microsoft 365 (Outlook) — Sending Touches and replies from your mailbox, reading replies
- HubSpot — Syncing Leads, transcripts and meetings to your CRM
- Slack — Posting escalations to your channel
Company data sources
Salesling keeps its own index of companies (name, website, industry, city) to find prospects for workspaces. Part of it comes from open data, used under these licences:
- Overture Maps Places — Overture Maps Foundation, overturemaps.org. Published under the Community Data License Agreement – Permissive 2.0 and, for places contributed by Foursquare, the Apache License 2.0: “Copyright 2024 Foursquare Labs, Inc. All rights reserved. Foursquare data was transformed to the Overture schema.” See Overture’s attribution page for each source and its notice.
These sources hold company facts only. People are never taken from them. The index lists people only where a company names them on its own legal notice, team, about or contact pages, with the page recorded; see section 5 of our Privacy Policy.