Background
Data Processing

Sub-Processor List

This page lists all third-party sub-processors that Chargezen engages to process personal data on behalf of our customers, as required by GDPR and our Data Processing Agreement.

Last Updated: January 4, 2026GDPR Article 28 Compliant

Sub-Processor Change Notifications

We provide advance notice of any changes to our sub-processor list. Under our Data Processing Agreement, customers have 30 days to object to new sub-processors.

To receive notifications: Emailprivacy@chargezen.com with subject "Sub-Processor Notifications" to be added to our notification list.

Current Sub-Processors

The following third parties process personal data on Chargezen's behalf as sub-processors.

Cloud Infrastructure

Amazon Web Services (AWS)

United States, European Union

Primary cloud hosting and infrastructure

Data Processed

All customer data, application data, backups

Google Cloud Platform (GCP)

United States, European Union

Secondary cloud infrastructure, AI/ML services

Data Processed

Application data, AI model processing

Payment Processing

Stripe

United States

Payment processing, billing, and fraud detection

Data Processed

Payment card information, transaction data, billing addresses

PayPal

United States

Alternative payment processing

Data Processed

Payment information, transaction data

Communications

Telnyx

United States

SMS and voice infrastructure for SmartyTap

Data Processed

Phone numbers, SMS message content, call recordings, delivery status

Resend

United States

Transactional and marketing email delivery

Data Processed

Email addresses, email content, delivery metrics

E-Commerce Platforms

Shopify

Canada, United States

E-commerce platform integration

Data Processed

Store data, order information, customer data via integration

AI & Machine Learning

OpenAI

United States

AI features including Zen AI and Concierge

Data Processed

Text inputs for AI processing, conversation context

Anthropic

United States

AI features and language model processing

Data Processed

Text inputs, conversation data

Analytics & Monitoring

Mixpanel

United States

Product analytics and user behavior tracking

Data Processed

Usage data, event data, anonymized user identifiers

Datadog

United States

Infrastructure monitoring and logging

Data Processed

Application logs, performance metrics

Sentry

United States

Error tracking and application monitoring

Data Processed

Error logs, stack traces, user context

Customer Support

Intercom

United States, European Union

Customer support chat and help desk

Data Processed

Support conversations, user contact information

Security & Authentication

Auth0 (Okta)

United States

Identity management and authentication

Data Processed

Authentication credentials, login events

Cloudflare

Global

CDN, DDoS protection, and security

Data Processed

IP addresses, traffic data, cached content

International Data Transfer Mechanisms

For transfers of personal data from the EEA, UK, or Switzerland to countries without adequate data protection laws, we implement the following safeguards:

Standard Contractual Clauses (SCCs)

EU-approved model clauses included in all sub-processor agreements

UK International Data Transfer Agreement

UK-specific addendum for post-Brexit compliance

Supplementary Technical Measures

Encryption, pseudonymization, and access controls

Transfer Impact Assessments

Documentation of legal regime in destination country

Sub-Processor Change Log

History of changes to our sub-processor list.

Jan 4, 2026
Added

Resend - Email delivery infrastructure

Jan 4, 2026
Added

Anthropic - AI features and language model processing

Jan 4, 2026
Removed

Twilio - Replaced with Telnyx

Jan 4, 2026
Removed

SendGrid - Replaced with Resend

Dec 1, 2025
Updated

Mixpanel - Updated data processing scope

Questions About Data Processing?

Our privacy team can provide additional details about our sub-processors and data processing practices.

Space, at your fingertips

What would you do with 22% more revenue?