Official Subprocessors List — allmates.ai

Access the official and up-to-date list of all subprocessors engaged by allmates.ai (Dearfox) for the processing of personal data, in compliance with Article 28 of the GDPR.

Last updated 1 day ago

📋 Official Subprocessors List — allmates.ai by Dearfox

Last updated: March 2026  |  Standard: Article 28 GDPR  |  CISO: Julien Guarino


What is a Subprocessor?

A subprocessor is any third-party company that Dearfox (the data processor) engages to process personal data on behalf of its customers (the data controllers), in the context of delivering the allmates.ai platform.

In accordance with Article 28 of the GDPR, Dearfox maintains a complete and up-to-date register of all subprocessors and ensures that each one provides sufficient guarantees regarding the protection of personal data.


📄 Access the Full Subprocessors List

The official and always up-to-date list of all allmates.ai subprocessors is publicly available here:

🔗 allmates.ai Subprocessors Register (Google Sheets)

This document is maintained by the Dearfox security team and updated whenever a subprocessor is added, modified, or removed.


What's in the Document?

The register lists 14 subprocessors across 6 categories. For each subprocessor, the following information is provided:

  • Subprocessor name and parent company
  • Category (Infrastructure, AI & Data Enrichment, Security, etc.)
  • Purpose of the data processing
  • Types of data processed
  • Data location — EU/EEA or third country
  • GDPR transfer mechanism — Standard Contractual Clauses (SCCs), DPA, or EU/EEA hosting

Subprocessors by Category

☁️ Infrastructure & Hosting

SubprocessorParent CompanyData Location
Google CloudGoogle LLC🟢 EU (europe-west1)
Google WorkspaceGoogle LLC🟢 EU
Supabase (self-hosted)Open Source🟢 EU
LovableLovable Inc.🟢 EU

📧 Email & Communication

SubprocessorParent CompanyData Location
SendGridTwilio Inc.🟡 United States — SCCs
SlackSalesforce Inc.🟡 United States — SCCs
NotionNotion Labs Inc.🟡 United States — SCCs

📊 CRM & Marketing

SubprocessorParent CompanyData Location
HubSpotHubSpot Inc.🟡 EU / United States — DPA + SCCs

🤖 AI & Data Enrichment

SubprocessorParent CompanyData Location
Perplexity AIPerplexity Inc.🟡 United States — SCCs
ElevenLabsElevenLabs Inc.🟡 United States — SCCs

🔗 Integration & Automation

SubprocessorParent CompanyData Location
PipedreamPipedream Inc.🟡 United States — SCCs

🛡️ Security & Compliance

SubprocessorParent CompanyData Location
DrataDrata Inc.🟡 United States — SCCs
WizWiz Inc.🟡 United States — SCCs

💬 Product & Feedback

SubprocessorParent CompanyData Location
FeaturebaseFeaturebase🟢 EU

GDPR Compliance Summary

CategoryTotalEU / EEAOutside EUTransfer Mechanism
Infrastructure & Hosting440EU/EEA — No transfer
Email & Communication303Standard Contractual Clauses (SCCs)
CRM & Marketing101DPA + SCCs
AI & Data Enrichment202Standard Contractual Clauses (SCCs)
Integration & Automation101Standard Contractual Clauses (SCCs)
Security & Compliance202Standard Contractual Clauses (SCCs)
Product & Feedback110EU/EEA — No transfer
TOTAL1459All transfers governed by SCCs or DPA

All subprocessors outside the EU are bound by Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914) or equivalent data processing agreements ensuring an adequate level of protection under GDPR Art. 46.


Change Notification Policy

Dearfox will notify partners of any material changes to this subprocessor list (addition, removal, or significant modification) in accordance with the terms of the applicable Data Processing Agreement (DPA).

For any questions regarding our subprocessors, data processing practices, or GDPR compliance posture, please contact: security@dearfox.io