Sub-processors
Last updated:
The services below are those named in the Data Processing Agreement and Privacy Policy. Connected services receive data according to your organization’s configuration.
| Name | Purpose | Processing location |
|---|---|---|
| OVHcloud | Cloud infrastructure: application, database, file storage and system email. | Beauharnois, Quebec, Canada |
| Stripe | Optional subscription billing or connected customer invoice payments; billing details and payment activity. | Outside Canada and the EU according to the DPA; country not specified |
| Microsoft 365 | Connected email and calendar; message content and calendar data. | Where your organization's own Microsoft 365 account keeps data, under its agreement with Microsoft |
| Google Workspace | Connected email and calendar; message content and calendar data. | Where your organization's own Google Workspace account keeps data, under its agreement with Google |
| QuickBooks | Connected accounting; invoice, customer and payment records. | Where your organization's own QuickBooks account keeps data, under its agreement with Intuit |
| Xero | Connected accounting; invoice, customer and payment records. | Where your organization's own Xero account keeps data, under its agreement with Xero |
| Microsoft Teams | Channel messages when connected. | Where your organization's own Microsoft Teams account keeps data, under its agreement with Microsoft |
| Phrase (Memsource) | Translation-project sync when connected. | Where your organization's own Phrase account keeps data, under its agreement with Phrase |
Optional sub-processors
Used only for workspaces whose administrator turns AI features on and accepts the data-processing notice. When an administrator connects their own provider key, we send the listed data to that provider on the customer’s behalf, under the customer’s own account and terms. Nothing is sent otherwise.
| Name | Purpose | Processing location |
|---|---|---|
| Anthropic | Optional AI features, only for workspaces whose administrator turns them on, under your organization’s own API key and terms with the provider; the conversation, its contact and company, and that workspace’s knowledge base articles. No training on this data. | United States |
| OpenAI | Optional AI features, only for workspaces whose administrator turns them on, under your organization’s own API key and terms with the provider; the conversation, its contact and company, and that workspace’s knowledge base articles. No training on this data. | United States |
Other disclosed categories
The DPA also lists optional error monitoring when configured and optional product-usage analytics after consent. It does not name the providers or their processing locations for these categories.
We inform the customer at least 30 days before adding or replacing a sub-processor and give the customer an opportunity to object. For processing locations of connected services, email support@unifydesk.app.