Skip to content
Adoptiv

Sub-processors

Every third party that may process personal data on Adoptiv's behalf, what each one receives, and whether it is on by default or only when someone switches it on.

Adoptiv Inc · Updated 2026-08-03

01How to read this page

A sub-processor is a company we use to run Adoptiv that may handle personal data belonging to our customers. Every one of them is under a written contract that limits it to processing on our instructions, holds it to security obligations no less protective than our own, and is covered by the transfer clauses in /legal/dpa. We remain responsible to our customers for what they do.

The last column is the one to read carefully. Many of these are not on unless somebody turns them on.

ValueWhat it means
DefaultPart of running the platform. Every customer's data may reach it
Customer choiceReached only when a customer switches on a feature, connects an account, or selects that provider
Operator choiceReached only when Adoptiv binds that provider to a job. Customers cannot add their own provider keys

One important scoping point about the AI section. That table lists every provider the platform is built to support, not a list of companies all receiving your data at once. Each AI job is bound to a single provider at a time, so the providers actually in use are a small subset. A customer can ask which providers are bound for its account and we will tell it.

This page covers sub-processors. It does not cover the services a customer chooses to connect for itself, such as another CRM or a video conferencing account. Those are the customer's own controllers and its own contracts, and we only move data at its instruction.

02Infrastructure

These run the platform. There is no version of Adoptiv that does not use them.

ProviderWhat it does for usWhat it receivesStatus
Hetzner Online GmbH, GermanyCloud servers and S3-compatible object storage. This is our primary infrastructure, in Nuremberg and FalkensteinEverything the platform stores: databases, call recordings, voicemail audio, CRM files and attachmentsDefault
Amazon Web ServicesS3 object storage, supported as an alternative to Hetzner for customers who need itThe same categories as above, where a workspace is configured to use itCustomer choice
Cloudflare, Inc.DNS, and it sits in front of our web trafficDNS records, and the connection metadata of any request to us, including IP addressDefault

03Mailbox and calendar

Reached only when a user connects their own mailbox or calendar. If nobody connects one, none of these receive anything.

ProviderWhat it does for usWhat it receivesStatus
Google LLC, Gmail APIReads and sends mail for a connected Gmail accountRequests for messages, threads, labels and attachments, and the messages a user sends from Adoptiv. See /legal/google-user-dataCustomer choice
Google LLC, Cloud Pub/SubDelivers the notification that tells us a connected Gmail mailbox has changedA change marker for the mailbox. It does not carry message contentCustomer choice
Google LLC, Calendar APIReads a connected calendar and writes meetings booked from AdoptivEvents, times, attendees and meeting linksCustomer choice
Microsoft Corporation, Microsoft GraphReads and sends mail, reads and writes calendar, reads contacts, for a connected Microsoft accountMessage headers, bodies and attachments, calendar events, contact entries, and change notification subscriptionsCustomer choice
The customer's own IMAP hostSyncs a mailbox the customer nominates by hostnameWhatever that mailbox contains. The customer chooses the host and we connect to itCustomer choice

04AI and speech

This is the most sensitive category, because these providers can receive the content of calls and email rather than just metadata.

AI analysis is opt-in for each workspace and every switch starts off. Nothing here receives anything until an administrator turns a feature on. Providers are engaged under terms that prohibit them from training any model on the data.

ProviderWhat it does for usWhat it receivesStatus
Microsoft Azure AI SpeechSpeech to text, and text to speech for voice promptsCall and voicemail audio, and the text to be spokenOperator choice, after a workspace opts in
AssemblyAI, Inc.Speech to textCall and voicemail audioOperator choice, after a workspace opts in
Speechmatics LtdSpeech to textCall and voicemail audioOperator choice, after a workspace opts in
Amazon TranscribeSpeech to textCall and voicemail audioOperator choice, after a workspace opts in
Amazon PollyText to speech for voice prompts and agentsThe text to be spokenOperator choice
ElevenLabs Inc.Text to speech, and speech to textThe text to be spoken, and call audio where its transcription is usedOperator choice
OpenAI, L.L.C.Language model work, and Whisper transcriptionCall transcripts, email thread bodies, CRM notes and comments, drafted email text, and call audio where Whisper is usedOperator choice, after a workspace opts in
Microsoft Azure OpenAI ServiceLanguage model workCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in
Anthropic PBCLanguage model workCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in
Google LLC, Gemini APILanguage model workCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in
Cohere Inc.Language model workCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in
Mistral AI SASLanguage model workCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in
Groq, Inc.Language model workCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in
Together Computer, Inc.Language model workCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in
Amazon BedrockLanguage model work and embeddingsCall transcripts, email bodies and CRM field valuesOperator choice, after a workspace opts in

Where analysis produces suggested corrections to a contact record, such as a corrected job title or postal address heard on a call, those suggested values pass through the language model as part of the same request. They are held as suggestions for a person to accept or reject, not applied automatically.

05Email delivery

ProviderWhat it does for usWhat it receivesStatus
Resend, Inc.Sends the platform's own mail: sign-in and verification, invitations, password resets, billing notices and digestsThe recipient address, subject and body of that message, and identifiers for the workspace and user it concernsDefault
Amazon Simple Email ServiceSends a customer's own outbound mail, when the customer selects itThe full message: sender, recipients, subject, body and attachmentsCustomer choice
Twilio SendGridSends a customer's own outbound mail, when the customer selects itThe full message: sender, recipients, subject, body and attachmentsCustomer choice
Mailgun Technologies, Inc.Sends a customer's own outbound mail, when the customer selects it. A European endpoint is availableThe full message: sender, recipients, subject, body and attachmentsCustomer choice
The customer's own SMTP hostSends a customer's own outbound mail through a server it nominatesThe full message. The customer chooses the hostCustomer choice

Resend is the only one of these that is always on, because the platform has to be able to email you about your own account. A customer's own campaign and CRM mail never silently falls back to it: if the customer's chosen sender is unavailable, the send fails rather than going out from an Adoptiv address.

06Telephony numbers

Adoptiv runs its own voice infrastructure. Call media and recordings stay on our own servers and storage. The companies below sell and provision phone numbers.

ProviderWhat it does for usWhat it receivesStatus
Twilio Inc.Searches for and buys phone numbersA country and area code when searching, and one number in E.164 format when buying, plus the address to route that number toCustomer choice
Telnyx LLCSearches for and buys phone numbersThe same: search criteria, one E.164 number, and a routing identifierCustomer choice
Plivo Inc.Searches for and buys phone numbersThe same: search criteria, one E.164 number, and a routing identifierCustomer choice
Sinch ABSearches for and buys phone numbersThe same: search criteria, one E.164 number, and a routing identifierCustomer choice

None of these receives call audio, recordings, transcripts or call detail records from Adoptiv. They do not receive contact lists or CRM data. To be straight about one thing that is inherent rather than something our software sends: whoever is the carrier of record for a number carries the calls to and from it, so that provider's network sees the call the way any telephone carrier does.

Messaging runs on the same carrier that supplies the number. A text sent from Adoptiv goes out over that carrier, and the recipient number, the message body and the sending number reach it in order to be delivered. Nothing else about the record travels with it.

07Payments

ProviderWhat it does for usWhat it receivesStatus
Stripe, Inc.Takes payment and manages subscriptions. This is our only payment processorCustomer name, email address, billing address, and an identifier for the workspace. Card details are entered directly with Stripe, which is a PCI-DSS Level 1 service provider, and Adoptiv servers never see or store a card numberDefault

There is no second payment processor. If you find another one named in an older Adoptiv document, that document is out of date and this page is correct.

08Compliance screening and business data

ProviderWhat it does for usWhat it receivesStatus
The Blacklist AllianceScreens phone numbers against do-not-call and known litigator lists before a call is placedPhone numbers onlyOperator choice
Google Maps PlatformVerifies and standardises a postal address, and renders a static map of itA postal addressOperator choice
ClearbitLooks up company information from a domain nameA company domain nameOperator choice
Apollo.ioLooks up company information from a domain nameA company domain nameOperator choice
ZoomInfoLooks up company information from a domain nameA company domain nameOperator choice
LushaLooks up company information from a domain nameA company domain nameOperator choice
CognismLooks up company information from a domain nameA company domain nameOperator choice

The five company lookup providers do the same job and only one is used at a time. They receive a company domain, not a person's contact details.

09Meetings

Reached only when a user connects that account to create meeting links from Adoptiv.

ProviderWhat it does for usWhat it receivesStatus
Zoom Video Communications, Inc.Creates a meeting and returns a join linkThe meeting subject, time and the invited attendeesCustomer choice
Google MeetCreates a meeting and returns a join link, through Google CalendarThe meeting subject, time and the invited attendeesCustomer choice
Microsoft TeamsCreates a meeting and returns a join link, through Microsoft GraphThe meeting subject, time and the invited attendeesCustomer choice
Cisco WebexCreates a meeting and returns a join linkThe meeting subject, time and the invited attendeesCustomer choice

10Product telemetry and support

ProviderWhat it does for usWhat it receivesStatus
Functional Software, Inc. trading as SentryError and performance monitoring, so we find faults before you report themError reports, stack traces and performance traces. These are tagged with the signed-in user's identifier and email address and the workspace identifier, so we can tell whose fault we are looking at. Session replays are captured with text masked and media blockedDefault
PostHog, Inc.Product analytics on our marketing and sign-in pagesAnonymous page views and interaction events. It is not loaded inside the authenticated product, and visitors in the EEA, the UK and Switzerland are not tracked unless they consentDefault on marketing pages
Intercom, Inc.The support messenger and our support inboxFor a signed-in user: name, email, phone, and the workspace name, plan and country. For a website visitor: nothing identifying. The messenger loads for everyone so that support is always reachable, and it is not gated behind the analytics consent bannerDefault
Google Analytics 4Website traffic measurement. Marketing pages onlyPage views and clicks on calls to action. No names, emails or phone numbers are sent. It does not load in the product, and it does not load outside our public websiteMarketing pages, subject to consent
Google AdsMeasures which adverts lead to a demo request. Marketing pages onlyA conversion event. No names, emails or phone numbers are sentMarketing pages, subject to consent

Sentry is the one to note if you are assessing us, because it is the only telemetry provider that receives an identifiable email address, and it is on by default. It exists so that when something breaks we can find the account it broke for.

11Website and browser services

These are small, but they are outbound connections and they belong on the list.

ProviderWhat it does for usWhat it receivesStatus
Gravatar, an Automattic serviceShows a profile picture for a contact where one existsA hashed form of the contact's email address, requested by your browser rather than by our servers. Your browser's IP address reaches Gravatar as part of that requestDefault
Google reCAPTCHAStops automated abuse of our public formsA challenge token, plus the browser and IP information Google collects to score itDefault on public forms
Browser push servicesDelivers a push notification to a browser that has asked for them. In practice this is the push endpoint operated by the browser's maker, such as Google, Mozilla or AppleThe push endpoint identifier and the encrypted notification payloadCustomer choice, per user
Calendly LLCBooks demo calls from our public website. It is not part of the productThe name, email and time chosen by whoever books a demo with our sales teamMarketing pages only

12What is deliberately not on this list

Naming a company we do not use would be as misleading as leaving out one we do, so here is what we checked and excluded.

  • No second payment processor. Billing runs through Stripe alone.
  • No IP geolocation service. We look up approximate location from a database file held on our own servers, so visitor IP addresses are not sent to a geolocation vendor.
  • No advertising or data broker receives customer content, and we do not sell personal data.
  • No AI provider receives anything from a workspace that has not switched AI features on.

Configuration keys for unused services sometimes survive in a codebase after a feature is removed. A leftover key is not a sub-processor. This page lists services that actually receive data.

13Changes, and how to be told about them

We give at least 30 days' notice before we add a new sub-processor or replace an existing one. The notice period runs from the day this page is updated.

  • To subscribe, email subprocessors@adoptiv.com with the subject Subscribe and tell us which addresses to notify. We will confirm, and you can unsubscribe the same way.
  • Notice goes to every subscribed address and to the account administrator on file.
  • If you object on reasonable data protection grounds, write to legal@adoptiv.com within the 30 days and explain the grounds. We will work with you to resolve it.
  • If it cannot be resolved, you may terminate the affected part of the service without penalty and receive a pro rata refund for the unused period, as set out at /legal/dpa.

We may occasionally have to replace a sub-processor faster than 30 days, for instance if one fails or a contract is terminated for cause. If that happens we will tell you as soon as we can and explain why, and your right to object still stands.

Questions about anything on this page go to privacy@adoptiv.com, or Adoptiv Inc, 2810 N Church St STE 88783, Wilmington, DE 19802, United States. Our phone number is +1 (636) 556 0022.

Adoptiv Inc, 2810 N Church St STE 88783, Wilmington, DE 19802, United States. Questions about this document go to legal@adoptiv.com. Privacy requests go to privacy@adoptiv.com.