Sub-processors
Last updated:
Attribyte engages the sub-processors below to operate the Platform. This page is the Sub-processor List referenced in Section 8 of the Data Processing Agreement; changes to it follow the notice and objection mechanics there. To receive notice of changes by email, write to legal@attribyte.app.
Personal data is hosted inside the European Economic Area, in Amazon Web Services' Stockholm region. Sub-processors established outside the EEA receive data under the EU Standard Contractual Clauses, and several also hold EU-US Data Privacy Framework certification.
| Sub-processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Amazon Web Services | Hosting, database, storage, content delivery, transactional email (SES) | Data in Stockholm, Sweden; company in the United States | SCCs; DPF |
| Stripe | Brand charges, creator payouts, identity verification | Ireland / United States | SCCs; DPF |
| Klaviyo | Marketing email and waitlist communications | United States | SCCs; DPF |
| Sentry | Error and performance monitoring | United States | SCCs; DPF |
| Google Analytics | Website analytics, loads only after analytics consent | Ireland, onward to United States | SCCs |
| Snap (Snapchat Pixel) | Measurement of our own advertising on public marketing pages | United States / United Kingdom | SCCs; DPF |
| Google (Gemini API) | AI transcription and analysis of creator content, AI Insights | United States | SCCs |
| Cloudflare | Content delivery, security and the proxy for brand tracking domains (pixel requests pass through Cloudflare's network) | United States, global network | SCCs |
Not sub-processors. Shopify, Meta, TikTok and Snapchat as advertising and social platforms are each their own controller. They are connected by the Brand or the Creator and process data under their own terms and privacy policies.
+116.4%