Sub-processors
Last updated: 30 September 2026
These are the companies that process personal data or Customer Data for us. Services we run ourselves, such as sign-in and pipeline orchestration, are on our own servers and are not listed.
Current sub-processors
| Company | Location | What it does for us | Data it receives |
|---|---|---|---|
| Contabo GmbH | Germany; servers in France (EU) | Hosts the Pipeloom platform: databases, pipeline runs, job logs and stored connector credentials | All account data and Customer Data |
| Vercel Inc. | United States; global network | Serves the app, website and docs, and relays the app's requests to our servers | IP addresses and request details; app requests in transit |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | United States / Ireland | Payments, subscriptions, invoices and the billing portal | Billing contact details, payment details, plan and usage totals |
| Resend (Plus Five Five, Inc.) | United States; sending from the EU | Sends service emails such as invitations and sign-in links | Recipient email address and the email's content |
| Anthropic PBC | United States | AI model behind the copilot | Copilot messages and the pipeline context sent with them |
| Google LLC | United States | Sign in with Google, if you choose it; our support mailbox | Name and email address at sign-in; emails you send us |
| ImprovMX | [country, from ImprovMX's DPA] | Forwards email sent to getpipeloom.com addresses to our mailbox | Emails you send us |
On standby
OpenAI, L.L.C. (United States) is configured as an alternative AI model for the copilot but receives no data today. We will list it above, with notice as described below, before switching to it.
Safeguards
Each sub-processor is bound by a written agreement that limits it to providing its service to us and requires appropriate security. Transfers outside the EU and UK rely on the Standard Contractual Clauses or the EU-US Data Privacy Framework. The AI model providers do not use copilot content to train their models.
Changes
We update this page at least 30 days before a new sub-processor starts processing Customer Data. To be told by email, or to object to a change, write to privacy@getpipeloom.com.