OpenSay's Subprocessors

Last edited: Oct 1, 25

OpenSay utilizes third-party services (subprocessors) that may have access to limited personal customer data. These subprocessors support the core functionality of the OpenSay service, including cloud infrastructure, email, file storage, analytics, user support, and payments processing.

Before engaging any subprocessor, OpenSay reviews their security and privacy practices and, where applicable, takes additional steps to ensure a high standard of data protection.

As part of our compliance with data protection laws, including the GDPR, we ensure appropriate safeguards for international data transfers. For U.S.-based subprocessors, we verify certification under the EU-U.S. Data Privacy Framework (DPF) where applicable and utilize Standard Contractual Clauses (SCCs). For subprocessors in the UK or EEA, transfers are covered by adequacy decisions or equivalent protections.

OpenSay currently uses the following subprocessors:

Subprocessor Service Provided Location Data Transfer Mechanism Privacy Policy
Google Cloud service provider, Email, File Storage, Analytics United States of America EU-U.S. DPF, SCCs Google Privacy Policy
Paddle Payments processing United Kingdom UK Adequacy Decision, SCCs Paddle Privacy Policy
Cloudflare Compute, Threat prevention, Content distribution, domain name resolution United States of America EU-U.S. DPF, SCCs Cloudflare Privacy Policy
Sentry Error tracking United States of America EU-U.S. DPF, SCCs Sentry Privacy Policy
Atlassian Analytics, Business Intelligence United States of America EU-U.S. DPF, SCCs Atlassian Privacy Policy
Crisp.chat Customer Support and Chat France Within EEA Crisp Privacy Policy

Note: Chart.io Inc. was acquired by Atlassian in 2021, and the service has been integrated accordingly.

Over time, OpenSay may cease the usage of a certain subprocessor or add a new subprocessor if we believe it will enhance our ability to deliver the OpenSay service. We will periodically update this page to reflect additions and removals to our list of subprocessors. Customers may subscribe to updates via email by contacting our Data Protection Officer at sagi at opensay.co.

For more information about OpenSay's privacy practices, please view our Privacy Policy. Additional details on data processing can be found in our Data Processing Addendum (DPA) and Security page.

Key Citations

FAQ

On topic product info and updates

No spam. Unsubscribe anytime.

ISO27001 Compliance
In Progress
GDPR Compliance

Heterodox Ltd.© 2025