# Sub-processors

**List in force as of 20 October 2026**

Service providers that process personal data on behalf of InvokeApp when providing the service. This is the Sub-processor Annex referred to in clauses 11.2 and 16.2 of the [Terms of Service](https://invokeapp.io/terms) and Annex C of the [Data Processing Agreement](https://invokeapp.io/dpa). Any addition or replacement is notified 30 days in advance (clause 16.3).

| Provider | Service | Data | Processing location | Safeguard outside the EEA |
|---|---|---|---|---|
| Google Cloud EMEA Limited (Ireland) | Platform hosting: compute, database, storage, queues, secrets and logs; website hosting | All platform data | European Union (Madrid, `europe-southwest1`) | Google Cloud data processing terms; standard contractual clauses and Data Privacy Framework for access from third countries |
| Google Cloud EMEA Limited — Vertex AI (Gemini models) | Artificial intelligence features | Only the text each feature needs | European Union (Belgium, `europe-west1`) | Same as above. No training with customer data |
| Google Ireland Limited — Google Workspace | Email sent by InvokeApp (platform notices and communications) | Email address, name and message content | European Union and United States | Standard contractual clauses and Data Privacy Framework |
| Stripe Payments Europe, Ltd. (Ireland) | Payments and subscriptions | Billing and payment data | European Union and United States | Standard contractual clauses and Data Privacy Framework. Stripe is an independent controller for its own legal obligations |
| Meta Platforms Ireland Limited | WhatsApp Business Platform; Instagram, Facebook and Threads APIs | Phone numbers, messages, templates, posts and account identifiers | European Union and United States | Meta processor terms; Data Privacy Framework and standard contractual clauses |
| Twilio Ireland Limited | WhatsApp and SMS for the receptionist and appointment management | Phone numbers and message content | European Union and United States | Standard contractual clauses and Data Privacy Framework |
| 360dialog GmbH (Germany) | Alternative WhatsApp provider, only if the customer chooses it | Phone numbers and messages | European Union | — |
| Slack Technologies Limited (Ireland) | Internal notices of new requests received on the InvokeApp website | Data the person enters in the website form | European Union and United States | Standard contractual clauses and Data Privacy Framework |
| Telegram FZ-LLC | Internal technical alerts for the InvokeApp team | Identifiers and error codes | Outside the EEA | Standard contractual clauses |

Services the customer connects with its own account (its Gmail, its CRM, its website or its Meta app) are not listed: there the provider works for the customer, not for InvokeApp.