To provide Octom we use a small number of service providers that may process personal data on our behalf. This page lists them and what they are used for. We will update it when the list changes.
Current subprocessors
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database and authentication | Account data, workspace content (contacts, notes, follow-ups, activity) | EU (Frankfurt) |
| Vercel | Website and API hosting | Request data such as IP address and logs | Provider is US-based; processing may occur outside the EEA |
| Stripe | Subscription payments | Email address, plan and billing data. Card details go directly to Stripe and are never stored by Octom | Provider is US-based; processing may occur outside the EEA |
| Resend | Email delivery | Email address and the content of emails we send (account emails, optional daily summary, contact replies) | Provider is US-based; processing may occur outside the EEA |
| OpenAI | AI assistant text generation | Only what is needed for a request you make: your draft or the selected contact details (name, company, status, notes, recent activity) | Provider is US-based; processing may occur outside the EEA |
Transfers outside the EEA
Where a provider processes data outside the European Economic Area, we rely on the safeguards allowed by law, such as an adequacy decision or standard contractual clauses, as described in the provider’s own data processing terms.
Questions
If you have questions about subprocessors or need a data processing agreement, use the contact form.