Subprocessor List
Subprocessors
Last updated: 18 June 2026
This page lists the third-party subprocessors that Weavely Ltd. ("we", "us") engage to process personal data on behalf of our customers in the course of providing our services. We require each subprocessor to provide a level of data protection consistent with the terms of our Data Processing Agreement (DPA).
How to read this page. Sections 1–5 cover subprocessors — services we engage that may process, store, or transmit personal data on your behalf. Section 6 lists customer-authorized integrations (the platforms you connect to import your own data). For those, you act as the controller and authorize the data flow; depending on your DPA they may be treated as data sources rather than subprocessors. Confirm the correct classification with your legal counsel.
1. Cloud infrastructure & hosting
Subprocessor | Purpose | Data processed | Hosting region |
|---|---|---|---|
Google Cloud Platform (Google Ireland Ltd. / Google LLC) | Primary cloud infrastructure: Cloud Run, Cloud Build, Cloud Functions / Firebase, Cloud SQL (MySQL/MariaDB), Cloud Storage, Datastore, Pub/Sub, Cloud Tasks, Cloud Scheduler, Cloud Logging, Cloud Monitoring, Cloud KMS, Secret Manager, IAM | All customer and account data, credentials (encrypted), application logs |
|
Firebase (Google) | Serverless backend functions, authentication runtime | Account data, event/trigger payloads | EU / Google global |
All core compute, database, storage, and secrets management run within the Google Cloud
toolbox-acutoproject (regioneurope-west2).
2. Payments & billing
Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
Stripe (Stripe, Inc. / Stripe Payments Europe Ltd.) | Payment processing, subscription billing, usage metering | Billing contact details, payment card data (tokenized), subscription records | US / EU |
3. Email & communications
Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
Mailgun (Sinch / Mailgun Technologies, Inc.) | Transactional and alert email delivery (weekly reports, credential alerts, notifications) | Recipient email addresses, email content | EU ( |
4. AI / large language model providers
Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
Anthropic (Anthropic, PBC) | Claude API for AI-assisted features (e.g. "Ask", slide generation) | Prompts and content submitted to AI features, which may include account/campaign data | US |
OpenAI (OpenAI, L.L.C.) | LLM API for AI features and text processing | Prompts and content submitted to AI features | US |
IBM Watson (IBM Corp.) | Natural Language Understanding — industry/vertical classification | Text submitted for analysis | US / IBM Cloud |
SerpAPI (SerpApi, LLC) | Programmatic web search results for research/enrichment features | Search queries | US |
5. Monitoring, error tracking & analytics
Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
Sentry (Functional Software, Inc.) | Application error tracking and performance monitoring | Error reports, stack traces, request metadata, IP addresses, user/session identifiers | EU ( |
Google Analytics & Google Tag Manager (Google) | Website usage analytics (marketing site / app front-end) | Usage events, device/browser data, IP addresses, cookies | Google global |
Updates to this list
We may update this list of subprocessors from time to time as our services evolve. Material changes will be communicated in accordance with our Data Processing Agreement.
For questions about this list or our data processing practices, contact help@weavely.io
Own your marketing data. Scale without limits.