Wesend Subprocessor and Service Provider Register
Last Updated: July 2026
This register forms part of the Wesend Privacy Policy and Data Processing Addendum (DPA). It identifies the third-party providers used to operate, secure, analyze, and support the Wesend service.
Core Subprocessors
| Provider | Service Type | Purpose | Location(s) | Personal Data Processed | Role | Status |
|---|---|---|---|---|---|---|
| OVHcloud | Hosting / Infrastructure | Application hosting and infrastructure operations | France | Account data, application data, databases, logs, backups, stored service data | Subprocessor / infrastructure provider | Active |
| OpenAI, L.L.C. | AI Model API | Generation of automated responses and AI-powered features | United States / global | Prompts, message text, comment text, generated outputs, usage metadata, and any files or content submitted through AI features | Subprocessor | Active |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Social Platform Integration | Instagram messaging APIs, comment integrations, inbox automation, and platform connectivity for automated responses | United States / EU / global | Social account identifiers, message content, comment content, conversation metadata, platform user IDs, automation event data | Subprocessor / platform provider | Active |
| Cloudflare, Inc. | Object Storage | Media and video storage | United States / EU / global | Uploaded media, video files, file metadata, access logs, storage metadata | Subprocessor / storage provider | Active |
| Cloudflare, Inc. | CDN / Edge Security | Content delivery, caching, traffic routing, and network protection | United States / EU / global | IP addresses, request logs, security telemetry, cached content, device and browser metadata | Subprocessor / infrastructure provider | Active |
| Cloudflare, Inc. | Bot Protection / CAPTCHA | Bot detection, abuse prevention, and human verification | United States / EU / global | IP addresses, device and browser signals, security telemetry, and challenge interaction data | Service provider / security provider | Active |
Other Service Providers
| Provider | Service Type | Purpose | Location(s) | Personal Data Processed | Role | Status |
|---|---|---|---|---|---|---|
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Payments and Billing | Subscription billing, invoicing, and payment processing | United States / EU / global | Billing identifiers, billing details, customer contact details, transaction metadata, and limited payment information | Independent controller and/or service provider, depending on context | Active |
| PostHog, Inc. / PostHog Ltd. | Product Analytics | Product analytics and event tracking | Global | User ID or internal account identifier, usage events, device and browser data, IP address, and event metadata | Service provider / analytics provider | Active |
| Microsoft Corporation | Analytics / Session Replay | Product and website analytics, diagnostics, and session replay through Microsoft Clarity | United States / EU / global | User ID or internal identifier, page interaction data, session replay data, device and browser data, and IP address | Service provider / analytics provider | Active |
| Google Ireland Limited / Google LLC | Analytics | Website and product analytics through Google Analytics | United States / EU / global | User ID or pseudonymous identifier, cookies, device and browser data, IP address, traffic data, and event data | Service provider / analytics provider | Active |
| Google Ireland Limited / Google LLC | Tag Management | Deployment and management of website and product tags through Google Tag Manager | United States / EU / global | Technical request data, diagnostics data, tag-loading metadata, and related website interaction data | Service provider / tag management provider | Active |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Advertising / Conversion Measurement | Advertising, campaign attribution, conversion tracking, and performance measurement through Meta Ads and related tools | United States / EU / global | Conversion events, campaign data, attribution data, device and browser data, cookie or pixel identifiers, and limited event identifiers | Independent controller and/or service provider, depending on context | Active |
| Google LLC / Google Ireland Limited | Authentication | Account sign-in and authentication through Google Sign-In | United States / EU / global | Email address, basic profile information, Google account identifier, authentication tokens, and login metadata | Service provider / identity provider | Active |
Customer Notice
Wesend may update this register from time to time to reflect changes to its vendor stack. Where required under the applicable Data Processing Addendum, Wesend will update this register before a new Subprocessor begins processing Customer Personal Data and will provide any contractually required notice period.