Authorized Sub-processors

Last updated: June 8, 2026

To support the delivery of our services, Chat with CRM Ltd. engages specific third-party service providers ("Sub-processors") to assist with our data processing activities. We maintain a privacy-first infrastructure, prioritizing self-hosted AI and localized EU/UK data storage.

Below is the current list of authorized Sub-processors. We will notify customers via email or in-app notification 15 days prior to adding any new Sub-processor to this list.

Contabo GmbH

Purpose: Cloud Infrastructure & Hosting Services
Processing Location: Frankfurt, Germany (EU)
Data Touched: Application state data.

Supabase, Inc. / AWS

Purpose: Managed Database and Authentication Services
Processing Location: London, United Kingdom
Data Touched: Encrypted user credentials, CRM records, profile data.

Cloudflare, Inc.

Purpose: Edge Security, Content Delivery, and Bot Protection
Processing Location: Global / United States
Data Touched: Network traffic, IP addresses, browser telemetry.

Amazon Web Services (SES)

Purpose: Transactional Email Dispatch
Processing Location: EU / UK Region
Data Touched: Contact names, email addresses.

Artificial Intelligence Processing

We pride ourselves on data sovereignty. Our core Artificial Intelligence logic does not rely on third-party APIs.

Self-Hosted Open Source LLMs Active

Purpose: Primary AI Processing and CRM Analysis.
Processing Location: United Kingdom (Private Infrastructure)
Data Touched: Contextual prompts, chat logs, CRM data.
Model Training: Zero model training. Data remains strictly isolated.

Third-Party AI API Providers Inactive

Purpose: Optional backup AI processing capabilities.
Processing Location: N/A
Status: We currently do not route any customer data to external AI providers. If this status changes to support future optional features, customers will receive a 15-day prior notice in accordance with our DPA.