Subprocessors List

1 de nov. de 2026

Updated: November 1, 2026

Effective: November 1, 2026

Update Notice: This document has been revised and completely replaces any previous version. Please refer to the “Updated” and “Effective” dates above. Your continued use of the Site or Services after this edition is posted constitutes your acceptance of the revised terms. Previous versions are available in the Legal Center archive at https://expertly.com/legal/. Expertly uses third-party service providers (“Subprocessors”) to support the delivery of its products and services. These Subprocessors may process personal data on behalf of Expertly customers in accordance with applicable data protection laws, including the UK GDPR, EU GDPR, and similar frameworks. This list includes infrastructure, platform, analytics, customer support, and AI service providers. It lists third-party providers that Expertly itself engages and that may process personal data on customers’ behalf, whether for Expertly-hosted services or in performing professional services (for example, AI services and development and collaboration tools Expertly uses for that work). It covers providers and subcontractors Expertly engages to process personal data on a customer’s behalf, including for professional services performed in a customer’s own environment. A provider engaged directly by the customer under the customer’s own agreement, including the AI subscriptions and accounts a customer holds or connects itself in customer-hosted deployments such as Expertly Fleet and Expertly Deputy, is governed by the customer’s agreement with that provider and is not Expertly’s subprocessor solely because Expertly interoperates with it or it appears on this list; the parties’ actual roles and engagement arrangements determine subprocessor status.

1. Core Infrastructure & Hosting Providers

Subprocessor Location Amazon Web Services (AWS) Global (primary: USA, EU) Google Cloud Platform Global (primary: USA, EU) Microsoft Azure Global (primary: USA, EU) Cloudflare Global

2. Analytics & Error Monitoring

Subprocessor Location Sentry USA Amplitude USA Mixpanel USA

3. Communication & Customer Support

Subprocessor Location Intercom USA / EU Zendesk USA SendGrid USA

4. Artificial Intelligence & Machine Learning Providers

Subprocessor Location OpenAI USA Anthropic USA Google USA Hugging Face USA / EU Microsoft Global GroqCloud USA xAI USA Deepgram USA

5. Operational Support Services

Subprocessor Location WebINTENSIVE Software USA / Global

6. Payment & Billing Providers

Subprocessor Location Stripe USA / Global

7. Development & Internal Tools

Subprocessor Location GitHub USA Slack USA In addition to the subprocessors listed above, Expertly may engage independent contractors, including those sourced through third-party platforms, for development, support, or QA services. Where such contractors have access to personal data, they are bound by confidentiality and data protection obligations consistent with applicable law and this agreement. For the subprocessors Expertly engages, Expertly enters into the data-protection terms that applicable law requires, and remains responsible for its subprocessors to the extent applicable law and its data-processing terms require. Any liability of Expertly in connection with a subprocessor is subject to the exclusions and limitations of liability in the Terms of Service and any applicable supplemental terms. Some subprocessors listed here may not be actively involved in data processing at a given time. They are included due to potential or planned use within our Services. Changes to this list will be communicated in advance through updates to this page. You may check this page periodically. The AI providers Expertly engages may receive the content needed to perform their assigned services. Their permitted processing, retention and access depend on the particular service, account arrangement, applicable provider terms, data-processing agreements and deployment settings. Disabling model training does not by itself prevent storage, security or abuse review, or processing required by law, and does not establish that a business data-processing agreement applies. This list does not promise zero retention. Where a customer connects its own provider accounts, that provider’s terms with the customer govern its processing and retention. Subprocessor access is limited to what is required to deliver the Services. Where Expertly personnel use AI services that Expertly itself holds, including subscription plans, for professional services, Expertly selects and configures those services to exclude customer content from training or improving generative AI models offered to others. Expertly does not submit customer content through optional feedback or data-sharing features that permit that use. Expertly processes personal data on a customer’s behalf through those accounts only where the provider is listed here and the applicable arrangement includes the data-protection terms that law requires. If a service or account cannot meet these requirements, it is not used for the affected customer data.