Sub-processors
Last updated: 2026-06-10
This is the canonical, machine-readable list of all third parties that may process personal data on Elevay's behalf. It is generated from src/data/dpas.json in our application source — the page can never drift from the actual configuration.
Notification policy. We will notify subscribed customers at least 30 days in advance of any new sub-processor. Subscribe at contact@elevay.app.
CLOUD Act column. "yes" means the sub-processor is headquartered in a jurisdiction (mainly the United States) whose law allows extraterritorial data requests regardless of where data is stored. Data residency in the EU does not eliminate CLOUD Act exposure when the operator is US-headquartered. This distinction is documented openly because it matters for sovereignty-sensitive customers.
| Provider | Purpose | Data residency | Operator jurisdiction | CLOUD Act | DPA |
|---|---|---|---|---|---|
| Supabase Data residency in Frankfurt; operator is US-headquartered so US CLOUD Act applies. Sovereign migration target: Scaleway Managed DB (FR) or Infomaniak Postgres (CH). | Primary PostgreSQL database — customer CRM data, mailbox content, conversation history | EU (AWS eu-central-1, Frankfurt) | United States (Supabase Inc., Delaware) | yes | available |
| Vercel Sovereign migration target: Clever Cloud (FR), Scaleway Serverless, or Infomaniak Cloud Server. | Application hosting, edge functions, scheduled crons | Global (US primary, EU edges available) | United States (Vercel Inc.) | yes | available |
| Anthropic We pin to the eu.anthropic.com endpoint. Operator remains US-headquartered. Zero data retention requested by default; data is not used to train Anthropic models per their commercial terms. | LLM inference for chat, lead scoring, email drafting | EU (eu.anthropic.com — Frankfurt) | United States (Anthropic PBC) | yes | available |
| OpenAI Used only for embeddings. Transferred via SCCs + supplementary measures (minimisation, no PII fields). Sovereign migration target: Mistral Embed (FR). | Text embeddings for retrieval and search | United States (no EU inference endpoint available) | United States | yes | available |
| Mistral AI Activated via LLM_PROVIDER=mistral. EU-capital and EU-hosted, no extraterritorial US exposure. | EU-sovereign LLM alternative (router-enabled) | EU (Mistral La Plateforme, FR) | France (Mistral AI SAS) | no | available |
| Resend Sovereign migration target: Brevo (FR) or Mailjet (FR). | Transactional email (invites, password reset, alerts) | United States | United States (Resend Inc.) | yes | available |
| Stripe Required for card processing. EU customers are contracted under Stripe Payments Europe Ltd (Dublin). Sovereign alternative for SEPA-only: Mollie (NL), GoCardless. | Payment processing and subscription billing | United States (data flows) / Ireland (EU billing entity, Stripe Payments Europe Ltd) | United States with EU subsidiary (Ireland) | yes | available |
| Google (OAuth + Gmail API) Structurally non-substitutable: the user's own mailbox lives at Google. The user has already accepted Google's ToS. Access is not read-only: connecting a mailbox in Settings grants gmail.send and gmail.modify in addition to gmail.readonly. | Authentication via Google; read access to user mailbox and calendar (gmail.readonly, calendar.readonly, calendar.events); when a mailbox is connected in Settings, also send and mailbox-sync access (gmail.send, gmail.modify) | Global (Google Cloud) | United States (Google LLC) | yes | available |
| Microsoft (Entra + Graph + Outlook) Structurally non-substitutable: the user's own mailbox lives at Microsoft. The user has already accepted Microsoft's ToS. | Authentication via Microsoft, read-only access to Outlook mailbox + Graph calendar | Global (Microsoft 365) | United States (Microsoft Corp.) | yes | available |
| Inngest Sovereign migration target: BullMQ + Redis on Scaleway/Infomaniak (already partially in place in the worker app). | Background job queue and workflow orchestration | United States | United States (Inngest Inc.) | yes | available |
| Sentry PII scrubbing enabled (sendDefaultPii=false, beforeSend hook). DSN must point to de.sentry.io for EU residency. | Error reporting and performance monitoring | EU (de.sentry.io — Frankfurt) when configured, US by default | United States (Functional Software Inc.) | yes | available |
| PostHog Pinned to EU Cloud. Sovereign alternative: Matomo Cloud (FR) or Plausible (EE) for fully EU-capital operator. | Product analytics (page views, feature usage) | EU (eu.i.posthog.com — Frankfurt) | United States (PostHog Inc.) | yes | available |
| Apollo.io Used only when the user actively triggers enrichment. Sovereign migration target: Datagma (FR), Dropcontact (FR), Pappers (FR data SIRENE), Cognism (UK). | Contact and company enrichment (B2B firmographic data) | United States | United States | yes | available |
| EmailEngine (self-hosted) Open-source software run by Elevay on its own EU/CH infrastructure. Not a third-party sub-processor. | IMAP sync for connected mailboxes | Self-hosted on Elevay infra | Self (Elevay) | no (when self-hosted on EU/CH infra) | n/a |
| Hunter.io / Datagma / Pappers / Firmable Only activated when API keys are configured. Datagma + Pappers are EU-sovereign; preferred for EU lookups. | Secondary enrichment (email finding, EU/ANZ data) | Mixed: Hunter (FR), Datagma (FR), Pappers (FR), Firmable (AU) | Mixed | no (Hunter, Datagma, Pappers) | available |
| Twilio Pinned to the ie1 (Ireland) region. Recording is opt-in (default off) and recordings are deleted after the retention window (90 days by default). | Outbound voice calls, phone numbers, opt-in call recording | EU (region ie1, Dublin) for voice media when configured | United States (Twilio Inc.) | yes | available |
| Deepgram Streams call audio for transcription only; no retention requested. Active only during live calls. | Real-time speech-to-text for live call transcription | United States | United States (Deepgram Inc.) | yes | available |
| Upstash Holds short-lived operational state, not durable customer records. | Redis cache (rate limiting, transient state) | EU (configured region) | United States (Upstash Inc.) | yes | available |
| Kaspr Used only when the user actively triggers phone enrichment. CNIL enforcement precedent (2024) tracked in our vendor reviews. | Phone-number enrichment (FR-focused) | EU (France) | France (Kaspr SAS, Cognism group) | no | available |
| Lusha Israel holds an EU adequacy decision. Activated only on explicit enrichment requests. | Phone-number and email enrichment (fallback) | United States / Israel | Israel (Lusha Systems Ltd.) | no | available |
| FullEnrich Asynchronous enrichment via signed webhooks; activated only when configured and triggered. | Waterfall contact enrichment (EU mobile/email) | EU (France) | France (FullEnrich SAS) | no | available |
| Zeliq Asynchronous enrichment via signed webhooks; activated only when configured and triggered. | Contact enrichment (async) | EU (France) | France (Zeliq SAS) | no | available |
| Crunchbase Company-level data only (no personal data beyond public executive names). Activated only when an API key is configured. | Company intelligence (funding, investors) — optional | United States | United States | yes | available |
Subscribe to sub-processor change notifications
Email security@elevay.app with subject "subscribe sub-processor notifications" to receive 30-day advance notice of any new sub-processor.
See the Privacy Policy for legal bases, retention and data subject rights, and the Security page for technical controls.