Sub-processors
Last updated: 1 May 2026
engagelayer.io uses the following sub-processors to deliver the service. We notify customers 30 days before adding any new sub-processor.
1. Hosting & infrastructure
AWS (Frankfurt, Ireland) and OVH (Strasbourg) — primary application hosting and database. Both are GDPR-compliant with EU regions only. Used for: account data, configuration, conversation history.
2. AI provider
The managed AI provider that powers the assistant (e.g. OpenAI, Anthropic or Azure OpenAI). Visitor conversations are processed in an isolated per-tenant context, never in a shared pool. Their data handling is governed by their own DPA, which we recommend you review separately.
3. Payment processing
Stripe Payments Europe (Ireland) — used only for subscription billing and invoice generation. Card data never touches our servers. PCI-DSS Level 1 certified.
4. Email delivery
Postmark (USA, EU regions available) — used for transactional emails (invoices, password resets, lead notifications). No marketing email use.
5. Analytics & monitoring
Plausible Analytics (EU-hosted, cookie-free) for our own website. Sentry (EU region) for error tracking — no personal data captured. Datadog (EU region) for infrastructure monitoring.
6. Customer support
Intercom (EU region) — used for our customer support inbox. Records of support conversations are retained for 24 months.
7. Notification
When we plan to add or replace a sub-processor, we email all customer admins 30 days in advance. You can object — if your obligations make the change unworkable, you can terminate without penalty.
The English version of these documents is the legally authoritative reference.