Subprocessors
Third parties authorized to process customer data in support of Toutye services.
Current subprocessors
8 of 8 subprocessors shown
Download the full published list (CSV)
| Provider | Purpose | Primary processing location |
|---|---|---|
| OVHcloud | Production compute, databases, queues, and off-host backups | United States, Canada and United Kingdom |
| Oracle America, Inc. (Oracle Cloud Infrastructure) | Object storage (media, exports, backups, audit), key management, and DNS | United States |
| Cloudflare, Inc. | DNS, edge security, traffic protection, and Turnstile | Global |
| Meta Platforms, Inc. and applicable affiliates | WhatsApp Business Platform connectivity and messaging | Global |
| Twilio Inc. (SendGrid) | Transactional account and security email | United States |
| Forward Email (Forward Email LLC) | Forwarding of mail sent to Toutye's published role addresses (support, privacy, legal, security, abuse); no customer message content | United States |
| Anthropic, PBC | AI assistant: drafting replies and answering customers from a business's own knowledge base, only where the business has switched it on | United States |
| Stripe, Inc. and applicable affiliates | Payment processing and billing-event delivery | United States and regional processing locations |
The download is a snapshot of this published list, not an independent verification of current provider admission.
Changes
We update this list before a new subprocessor begins materially different processing and provide contract customers a reasonable opportunity to object on legitimate data-protection grounds. Contract customers may request change notices at [email protected].
Scope
A provider is a subprocessor only when it processes customer personal data on Toutye's behalf. Customer-directed integrations and the customer's own Meta relationship may also make a provider an independent controller or the customer's direct processor. Professional advisers, banks and authorities receiving narrowly required information are not listed as routine service subprocessors. Launch-required tax, invoice or statement providers will be added before they receive customer personal data.