List of Subprocessors
Last updated: February 27, 2026
About This List
In accordance with Article 28 of the General Data Protection Regulation (GDPR), Signuply.io Sp. z o.o. (hereinafter "Signuply") publishes this list of subprocessors — third-party companies that process personal data on our behalf as part of our services.
We notify customers of any changes to this list at least 30 days in advance, giving them the right to object.
Transfers outside the EEA: Where subprocessors are located in third countries (e.g. USA), data transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission and/or other appropriate safeguards pursuant to Chapter V of the GDPR.
Cloud & Infrastructure
Google LLC
USAAddress
1600 Amphitheatre Parkway, Mountain View, CA 94043
Processing Purpose
Email integration (Gmail API, OAuth 2.0), analytics (Google Analytics), AI-powered email analysis and response generation (Gemini API)
Categories of Data
Email addresses, access tokens, email content (for Gmail users), usage data; email subject lines and body content (for Gemini AI processing)
Transfer Safeguards
Standard Contractual Clauses (SCCs), Google Cloud Data Processing Addendum, Google Gemini API Additional Terms
Vercel Inc.
USAAddress
340 Pine Street, Suite 701, San Francisco, CA 94104
Processing Purpose
Application hosting, serverless functions, CDN delivery
Categories of Data
IP addresses, request logs, application data in transit
Transfer Safeguards
Standard Contractual Clauses (SCCs), Vercel Data Processing Agreement
Supabase Inc.
EU (Ireland)Address
970 Toa Payoh North #07-04, Singapore 318992
Processing Purpose
Database hosting (PostgreSQL), user authentication, file storage — data stored in EU (eu-west-1, Ireland)
Categories of Data
User accounts, email configurations, processed email metadata, API tokens
Transfer Safeguards
Data processed within the EEA (eu-west-1 region, Ireland), Supabase Data Processing Agreement
Hostinger International Ltd.
Lithuania / EUAddress
61 Lordou Vironos Street, 6023 Larnaca, Cyprus
Processing Purpose
Web hosting, domain services, email hosting
Categories of Data
Website data, domain registration data, hosted content
Transfer Safeguards
Processing within the EEA, Hostinger Data Processing Agreement
AI Processing
OpenAI, L.L.C.
USAAddress
3180 18th Street, San Francisco, CA 94110
Processing Purpose
AI-powered email analysis, classification, and automated response generation
Categories of Data
Email subject lines, email body content, sender metadata (for AI processing)
Transfer Safeguards
Standard Contractual Clauses (SCCs), OpenAI Data Processing Agreement, zero-day data retention option
Anthropic, PBC
USAAddress
548 Market Street, PMB 90375, San Francisco, CA 94104
Processing Purpose
AI-powered email analysis and automated response generation (Claude models)
Categories of Data
Email subject lines, email body content, sender metadata (for AI processing)
Transfer Safeguards
Standard Contractual Clauses (SCCs), Anthropic Commercial Terms of Service
Vapi AI, Inc.
USAAddress
651 N Broad St, Suite 206, Middletown, DE 19709
Processing Purpose
AI voice agent platform — real-time voice call processing, speech-to-text, text-to-speech, and AI-driven conversation handling for inbound and outbound calls
Categories of Data
Voice call audio, transcripts, caller phone numbers, conversation data, call metadata
Transfer Safeguards
Standard Contractual Clauses (SCCs), Vapi Data Processing Agreement
Payments & Billing
Fakturownia Sp. z o.o.
Poland / EUAddress
ul. Łęczycka 12B, 85-737 Bydgoszcz, Poland
Processing Purpose
Online invoicing platform — generation, management, and archiving of sales invoices and billing documents
Categories of Data
Customer billing details (name, address, tax ID/NIP), invoice line items, payment status, company details
Transfer Safeguards
Processing within the EEA (Poland), Fakturownia Data Processing Agreement (GDPR-compliant)
PandaDoc, Inc.
USAAddress
3739 Balboa Street #1083, San Francisco, CA 94121
Processing Purpose
Document management, electronic signatures for contracts, proposals, and service agreements
Categories of Data
Customer names, email addresses, company details, contract and proposal content, electronic signature data, document metadata
Transfer Safeguards
Standard Contractual Clauses (SCCs), PandaDoc Data Processing Agreement
Stripe, Inc.
USAAddress
510 Townsend Street, San Francisco, CA 94103
Processing Purpose
Payment processing, subscription billing, and invoice generation for customer transactions
Categories of Data
Billing name and address, payment card data (tokenized, not stored by Signuply), transaction records, invoice details, customer email
Transfer Safeguards
Standard Contractual Clauses (SCCs), Stripe Data Processing Agreement, PCI DSS Level 1 certified
Automation & Integration
Make (Celonis SE)
Germany / EUAddress
Theresienstraße 6, 80333 Munich, Germany
Processing Purpose
Workflow automation and integration orchestration between services
Categories of Data
Workflow data, API payloads, email metadata passed through automation scenarios
Transfer Safeguards
Processing within the EEA, Make Data Processing Agreement (GDPR-compliant)
n8n GmbH
Germany / EUAddress
Küstriner Straße 19, 10439 Berlin, Germany
Processing Purpose
Workflow automation and integration orchestration between services
Categories of Data
Workflow execution data, API payloads, email metadata processed during automation
Transfer Safeguards
Processing within the EEA, n8n Data Processing Agreement (GDPR-compliant)
Changes to This List
Signuply reserves the right to add, replace, or remove subprocessors. Customers will be notified of any changes via email or through our platform at least 30 days before the change takes effect. Customers who object to the addition of a new subprocessor may terminate their contract in accordance with the termination provisions set out in the Terms of Service.
Contact
If you have any questions about our subprocessors or data processing practices, please contact us: