Sub-processor List
Effective date: 11 June 2026
What this page is
A sub-processor is a third party that Assistify engages to help deliver its service and that processes personal data on Assistify's behalf.
When a merchant installs the Assistify widget on its website, Assistify acts as a processor for the personal data of that website's visitors, and the merchant is the controller. This list records the sub-processors that may process website-visitor data handled through the chat. It is referenced by the Data Processing Agreement between Assistify and each merchant.
Current sub-processors
| Name | Service | Processing location | Transfer mechanism |
|---|---|---|---|
| Google LLC | Large language models that generate the AI agent's automated chat replies and power knowledge-base search and translation. No training on customer data. | United States | Standard Contractual Clauses, supported by a transfer impact assessment. Additionally certified under the EU-US Data Privacy Framework. |
| OpenAI | Large language model that generates the AI agent's automated chat replies. No training on customer data. | United States | Standard Contractual Clauses, supported by a transfer impact assessment. |
| Cloudflare, Inc. | Network and security infrastructure. Traffic to the service is routed through Cloudflare's network. | Global edge network (EU and United States) | EU-US Data Privacy Framework; Standard Contractual Clauses as fallback. |
| Contabo GmbH | Cloud server hosting for the Assistify platform and its database. | European Union | Not required; processing stays in the EU. |
| Resend | Transactional email delivery. | United States | EU-US Data Privacy Framework; Standard Contractual Clauses as fallback. |
| Sentry (Functional Software, Inc.) | Application error monitoring. | United States | EU-US Data Privacy Framework; Standard Contractual Clauses as fallback. |
File storage
Files uploaded by website visitors during a chat conversation are stored by Assistify itself, on its own EU infrastructure running on the hosting listed above. This storage is not a separate sub-processor and involves no international transfer.
Merchant-directed integrations
A merchant can choose to connect Assistify to other tools that the merchant already uses, for example e-commerce platforms and notification channels. When a merchant sets up such an integration, Assistify exchanges data with that tool on the merchant's instruction.
These merchant-directed integrations are not Assistify sub-processors. The merchant chooses the tool, controls the connection, and has its own direct relationship and agreement with the provider of that tool. The merchant is responsible for the data protection arrangements that apply to any tool it connects.
How we notify you of changes
This page is versioned and dated. The changelog below records each change.
Before a new or replacement sub-processor starts processing personal data, Assistify gives merchant administrators at least 30 days notice by email.
A merchant may object to a new or replacement sub-processor on reasonable data protection grounds by writing to Assistify within that 30-day window. The objection and resolution process is set out in the Data Processing Agreement.
To subscribe to sub-processor change notifications, or to confirm which administrators at your organisation receive them, contact [email protected].
Changelog
| Date | Version | Change |
|---|---|---|
| 2026-06-11 | 1.0 | Initial published version. |