This page lists the third-party providers that may process Customer Data on Inquiru's behalf, in accordance with Article 28(2) GDPR and Section 21 POPIA. We disclose subprocessors by category. Some categories — CRMs, CDPs, data warehouses, billing connectors, and support-tool integrations — are only engaged when an Inquiru customer (the workspace administrator) explicitly enables them; others are core infrastructure used for every workspace.
Customers may subscribe to email notifications of changes to this list by emailing [email protected]. We provide at least 30 days' advance notice of new or replacement subprocessors before they begin processing Customer Data.
Core infrastructure (always engaged)
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|
| Amazon Web Services / DigitalOcean (hosting) | Application hosting, database, storage | All Customer Data at rest and in transit | United States, European Union | SCCs (EU 2021/914), UK IDTA |
| Cloudflare | CDN, DDoS protection, TLS termination | Request metadata, IP addresses | United States | SCCs (EU 2021/914) |
| Resend | Transactional email delivery (password reset, privacy notifications) | Email addresses, message content | United States | SCCs (EU 2021/914) |
| LemonSqueezy | Subscription billing and payment processing | Billing contact, transaction history | United States | SCCs (EU 2021/914) |
AI model providers
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|
| Anthropic | AI inference (default model provider for response generation) | Conversation content, system prompts | United States | SCCs (EU 2021/914); zero-data-retention contract |
| OpenAI | Optional alternative AI model provider, embeddings | Conversation content, embeddings | United States | SCCs (EU 2021/914); contractual no-training clause |
| DeepSeek | Optional alternative AI model provider (BYOK) | Conversation content | China | Customer consent; engaged only when workspace selects this provider via BYOK |
| xAI | Optional alternative AI model provider (BYOK) | Conversation content | United States | SCCs (EU 2021/914); engaged only when workspace selects this provider |
Support-tool integrations (engaged when enabled by your workspace)
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|
| Zendesk (incl. Sunshine Conversations) | Customer support ticket integration when enabled by workspace | Conversation content, customer identifiers | United States | SCCs (EU 2021/914) |
| Intercom | Optional support integration when enabled by workspace | Conversation content, customer identifiers | United States, Ireland | SCCs (EU 2021/914) |
| Slack | Bidirectional Slack assist integration when enabled by workspace | Conversation summaries, user identifiers | United States | SCCs (EU 2021/914) |
CRM integrations (engaged when enabled by your workspace)
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|
| Salesforce | CRM enrichment when enabled by workspace | Customer profile attributes | United States, EU | SCCs (EU 2021/914) |
| HubSpot | CRM enrichment when enabled by workspace | Customer profile attributes | United States | SCCs (EU 2021/914) |
| Optimove | CRM enrichment when enabled by workspace | Customer profile attributes | United States, Israel, UK | SCCs (EU 2021/914) + adequacy |
| Klaviyo | CRM/marketing enrichment when enabled by workspace | Email engagement data | United States | SCCs (EU 2021/914) |
| Mailchimp | CRM/marketing enrichment when enabled by workspace | Email engagement data | United States | SCCs (EU 2021/914) |
| Customer.io | Customer messaging enrichment when enabled by workspace | Customer profile attributes | United States | SCCs (EU 2021/914) |
Customer Data Platform integrations (engaged when enabled by your workspace)
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|
| Segment | Event forwarding when enabled by workspace | Customer event data | United States | SCCs (EU 2021/914) |
| mParticle | Event forwarding when enabled by workspace | Customer event data | United States | SCCs (EU 2021/914) |
| RudderStack | Event forwarding when enabled by workspace | Customer event data | United States | SCCs (EU 2021/914) |
Data warehouse integrations (engaged when enabled by your workspace)
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|
| Snowflake | Data-warehouse enrichment when enabled by workspace | Customer attributes selected by workspace | United States, EU | SCCs (EU 2021/914) |
| Google BigQuery | Data-warehouse enrichment when enabled by workspace | Customer attributes selected by workspace | United States, EU | SCCs (EU 2021/914) |
| Amazon Redshift | Data-warehouse enrichment when enabled by workspace | Customer attributes selected by workspace | United States, EU | SCCs (EU 2021/914) |
Billing integrations (engaged when enabled by your workspace)
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|
| Stripe | Subscription billing integration when enabled by workspace | Billing contact, payment metadata | United States, Ireland | SCCs (EU 2021/914) |
| Chargebee | Subscription billing integration when enabled by workspace | Billing contact, subscription metadata | United States, India | SCCs (EU 2021/914) |
Notes
- The destination column reflects the subprocessor's primary processing location. Some subprocessors operate globally and may also process data in the regions noted on their respective privacy pages.
- Where the transfer mechanism is "SCCs (EU 2021/914)", Inquiru and the subprocessor have entered into the European Commission's Standard Contractual Clauses (Implementing Decision 2021/914) supplemented by the UK International Data Transfer Addendum where applicable. For transfers from South Africa, Section 72 POPIA bases are documented in our DPA.
- Bring-Your-Own-Key (BYOK) AI providers are engaged only when a workspace explicitly configures them through Settings → AI Model and supplies their own API key.
