Sub-processors
Last updated: 25 August 2026 · Effective: 25 August 2026
This page lists the third parties that may process customer personal data to deliver Openbiznis. We give at least 30 days' notice before adding or replacing one, per section 8 of the DPA.
1. How to be notified of changes
Email support@openbiznis.comwith the subject "Sub-processor notifications" and we will add you to the notice list. Customers may object to a new sub-processor on reasonable data protection grounds within the notice period, as set out in the Data Processing Agreement.
2. Infrastructure sub-processors
These providers host or transmit customer data as part of running the platform.
| Provider | Purpose | Processing location |
|---|---|---|
| Supabase | Primary application database, authentication, and file storage | European Union |
| Vercel | Application hosting, edge delivery, and request logging | European Union (with global edge network) |
| Cloudflare | Bot and abuse protection (Turnstile) on sign-in, sign-up, workspace creation, and public booking forms — processes IP address and browser signals to distinguish people from bots | European Union (with global network) |
| Telnyx | Voice telephony — call origination and termination, phone numbers, and call metadata for the in-browser dialer | European Union / United States |
| Resend | Delivery of transactional email — workspace invitations, booking confirmations and reminders, and account notices. Processes recipient name and email address. | European Union / United States |
| Stripe | Subscription billing and payment processing for the customer's own Openbiznis subscription. Processes billing contact and payment details; card data is handled by Stripe and never reaches our systems. | European Union / United States |
| OpenRouter | Inference routing for the platform's AI features — call summaries, suggested follow-up messages, and social performance insights. Runs only when a user explicitly requests one of those features. Where a call has been recorded and transcribed, the transcript text of that call is sent for summarisation. See the AI & Content Policy for user obligations and output rules. | United States |
3. Integration sub-processors
These process data only where a customer enables the corresponding integration. If the integration is off, no data flows to the provider.
| Provider | Purpose | Processing location |
|---|---|---|
| Google (Google Calendar API) | Two-way calendar synchronisation for booked appointments | European Union / United States |
| Meta Platforms | Delivery of Instagram and Facebook conversations into the shared inbox | European Union / United States |
| Calendly | Imports booked meetings into the platform and keeps them in step. Processes the invitee's name, email address and meeting time. | United States |
| Composio | Brokers the customer's own OAuth connections to Google and Meta, and relays the data those integrations return | United States |
Openbiznis also offers connections to LinkedIn, Twilio and HubSpot. Connecting one authorises Openbiznis with that provider and stores the resulting token; no customer personal data is sent to any of the three today. They are named here for completeness rather than listed above, and will move into the table — with notice, under section 8 of the DPA — before any data begins to flow.
4. Transfers outside the EEA
Where a provider above processes personal data outside the European Economic Area, the transfer relies on an adequacy decision by the European Commission where one applies to that provider, and otherwise on the European Commission's Standard Contractual Clauses (Decision 2021/914) together with supplementary measures identified in a transfer impact assessment.
5. Our own personnel
Launchzy personnel may access customer data where necessary to provide support, investigate a fault, or respond to a security incident. Access follows least privilege, requires multi-factor authentication, and is recorded in the audit trail.
6. Contact
Questions about this list, or a request for the current version in writing:support@openbiznis.com.