Subprocessors
Effective: June 1, 2025
Blooio engages certain third-party companies to assist in providing our services. These subprocessors may process personal data on our behalf, subject to appropriate data-processing agreements and safeguards.
We will update this page whenever a subprocessor is added, removed, or materially changed. If you have subscribed to notifications for this page, you will be notified of any updates prior to the change taking effect.
Current Subprocessors
| Subprocessor | Service | Location | Transfer Mechanism |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure and compute | Seattle, WA, USA | EU-US DPF; SCCs |
| Cloudflare, Inc. | Edge network, application hosting, object storage, caching, and bot protection | San Francisco, CA, USA | EU-US DPF; SCCs |
| Discord Inc. | Operational logging and incident notifications | San Francisco, CA, USA | SCCs |
| Google LLC | Cloud infrastructure, authentication (Firebase), anti-abuse (reCAPTCHA), product analytics | Mountain View, CA, USA | EU-US DPF; SCCs |
| HighLevel Inc. | CRM integration and messaging relay (GoHighLevel / LeadConnector) | Dallas, TX, USA | DPA |
| HubSpot, Inc. | CRM integration | Cambridge, MA, USA | EU-US DPF; SCCs |
| Meta Platforms, Inc. | Advertising conversion measurement (Conversions API) | Menlo Park, CA, USA | EU-US DPF; SCCs |
| Microsoft Corporation | Analytics and session replay (Microsoft Clarity) | Redmond, WA, USA | EU-US DPF; SCCs |
| OpenRouter, Inc. | AI and large-language-model inference | San Francisco, CA, USA | DPA |
| PlanetScale Inc. | Database hosting (PostgreSQL) | San Francisco, CA, USA | SCCs |
| Sinch AB (Mailgun) | Transactional email delivery | Stockholm, Sweden | Adequacy Decision (EU) |
| Stripe, Inc. | Payment processing and subscription billing | San Francisco, CA, USA | EU-US DPF; SCCs |
| Twilio Inc. | SMS and voice messaging | San Francisco, CA, USA | EU-US DPF; SCCs |
Transfer Mechanisms
- EU-US DPF — EU-U.S. Data Privacy Framework certification.
- SCCs — Standard Contractual Clauses approved by the European Commission.
- DPA — Data Processing Agreement in place.
- Adequacy Decision — The subprocessor is located in a jurisdiction deemed adequate by the European Commission.
Changelog
| Effective Date | Change |
|---|---|
| June 1, 2025 | Initial subprocessor list published. |
Contact
If you have any questions about our subprocessors or data processing practices, please contact us at enterprise@blooio.com.