Sub-processor List
Effective date: 21 May 2026
What this page is
A sub-processor is a third party that Assistify engages to help deliver its service and that processes personal data on Assistify's behalf.
Assistify is an embeddable AI customer-support chat widget. When a merchant installs the Assistify widget on its website, Assistify acts as a processor for the personal data of that website's visitors, and the merchant is the controller. This list applies to Assistify acting as a processor for merchants. It records the sub-processors that may process website-visitor data handled through the chat.
This page is versioned and dated. It is referenced by the Data Processing Agreement between Assistify and each merchant.
Current sub-processors
| Name | Service | Processing location | Transfer mechanism |
|---|---|---|---|
| Google LLC | Large language model that generates the AI agent's automated chat replies. No training on customer data. | United States | Standard Contractual Clauses, supported by a transfer impact assessment. Additionally certified under the EU-US Data Privacy Framework. |
| OpenAI | Large language model that generates the AI agent's automated chat replies. No training on customer data. | United States | Standard Contractual Clauses, supported by a transfer impact assessment. |
| Resend | Transactional email delivery. | United States | EU-US Data Privacy Framework; Standard Contractual Clauses as fallback. |
| Sentry (Functional Software, Inc.) | Application error monitoring. | United States | EU-US Data Privacy Framework; Standard Contractual Clauses as fallback. |
| Stripe | Payment processing for merchant subscriptions only. Stripe does not receive website-visitor chat data. | United States and EU | EU-US Data Privacy Framework, an adequacy decision, or Standard Contractual Clauses, as applicable to the specific transfer. |
File storage
Files uploaded by website visitors during a chat conversation are stored on Assistify's own EU infrastructure (AnewVision Cloud). This storage is operated by Assistify itself, not by a third party, so it is not a sub-processor and involves no international transfer.
Merchant-directed integrations
A merchant can choose to connect Assistify to other tools that the merchant already uses, for example e-commerce platforms and notification channels. When a merchant sets up such an integration, Assistify exchanges data with that tool on the merchant's instruction.
These merchant-directed integrations are not Assistify sub-processors. The merchant chooses the tool, controls the connection, and has its own direct relationship and agreement with the provider of that tool. The merchant is responsible for the data protection arrangements that apply to any tool it connects.
How we notify you of changes
This page is versioned and dated. The changelog below records each change.
Before a new or replacement sub-processor starts processing personal data, Assistify gives merchant administrators at least 30 days notice by email.
A merchant may object to a new or replacement sub-processor on reasonable data protection grounds by writing to Assistify within that 30-day window. The objection and resolution process is set out in the Data Processing Agreement.
To subscribe to sub-processor change notifications, or to confirm which administrators at your organisation receive them, contact [email protected].
Changelog
| Date | Version | Change |
|---|---|---|
| 2026-05-21 | 0.2 | Transfer mechanisms reviewed and confirmed per sub-processor. |
| 2026-05-20 | 0.1 | Initial version of the sub-processor list. |