Subprocessors
Updated June 2026
The approved third parties to whom we may pass your data as part of operating the product. Each is bound by a Data Processing Agreement (DPA) and committed to a protection level equivalent to what is described in our privacy policy and privacy posture. We notify customers of new subprocessors at least 30 days in advance via the email registered with their account. Add this page to your procurement team's watch-list if you need formal tracking.
A note on Amargi Workspace
Reach and every other Amargi product use a shared identity provider called Amargi Workspace for sign-in. Workspace is an internal authentication service operated by Amargi Creative, same legal entity, same hosting, same compliance perimeter, and therefore NOT a subprocessor. Workspace does not store any WhatsApp message content, contact lists, or any data governed by Meta's BSP terms. Full breakdown in our privacy posture.
Hostinger International Ltd
Purpose: Primary hosting, compute, the PostgreSQL databases, object storage, outbound SMTP email relay, and DNS. This is where customer data lives at rest. Location: Germany (Frankfurt), EU. Engagement: Always engaged, the platform host for every tenant; data (including encrypted backups) resides in the EU (Frankfurt). DPA: https://www.hostinger.com/privacy-policy
Meta Platforms, Inc. / Meta Platforms Ireland Ltd.
Purpose: WhatsApp Business Platform (Cloud API), Messenger Platform, Instagram Graph API. The channel provider for messages our customers send and receive through Meta-owned surfaces. Location: Ireland (EU customers) + United States. Engagement: Engaged when the customer connects a WABA, a Facebook Page, or an Instagram Business account. DPA: https://www.whatsapp.com/legal/business-data-transfer-addendum
OpenAI, L.L.C.
Purpose: Large-language-model inference for Amargi Agents and AI replies, when a tenant runs AI on the OpenAI provider. OpenAI does not train on data submitted through its API. Location: United States. Engagement: Only when an Agent run or an AI reply fires on the OpenAI provider. DPA: https://openai.com/policies/data-processing-addendum
Anthropic PBC
Purpose: Large-language-model inference (Claude) for Amargi Agents and AI replies, when a tenant runs AI on the Anthropic provider. Anthropic does not train on data submitted through its API (Commercial Terms). Location: United States. Engagement: Only when an Agent run or an AI reply fires on the Anthropic provider. DPA: https://www.anthropic.com/legal/commercial-terms
Google LLC (Gemini API)
Purpose: Large-language-model inference (Gemini) for Amargi Agents and AI replies, when a tenant runs AI on the Google provider. Amargi is provider-agnostic, you choose which model processes your prompts. Location: United States. Engagement: Only when an Agent run or an AI reply fires on the Google (Gemini) provider. DPA: https://cloud.google.com/terms/data-processing-addendum
Amargi Agents and AI provider choice
Amargi Agents is provider-agnostic: you choose which AI provider (OpenAI, Anthropic, or Google Gemini) processes your prompts, or none at all. Amargi is also developing its own LLM, planned for a future release; once available it will run on Amargi's own infrastructure, so AI can be served with no third-party AI subprocessor at all.
Cross-border transfers
Hosting (Hostinger) is in the EU (Frankfurt). The AI providers (OpenAI, Anthropic, and Google) are in the United States, and Meta is in Ireland/US. For transfers outside the EEA we rely on the EU Standard Contractual Clauses (2021 issue) and equivalent transfer mechanisms (UK IDTA, etc.). AI is optional, if you don't run it, no data leaves the EU for inference.
Contact
Questions about this list, or subprocessor-change notifications: contact@amargicreative.com