Snapshot 21506
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Subprocessors At Asanify, we are committed to transparency and privacy. Below is a list of our current subprocessors — third-party service providers who may process personal data on our behalf in connection with the delivery of our products and services. Each subprocessor is bound by contractual obligations and security standards appropriate to the data it handles, and we assess them against the data protection requirements applicable under laws such as the GDPR, India’s DPDP Act, and SOC 2. Where a provider is engaged under its published standard terms rather than a negotiated data processing agreement, that is noted against its entry below. Infrastructure & Hosting Subprocessor Purpose Location Retention Amazon Web Services (AWS) Cloud hosting (app, DB, media) Global As per internal retention policy AWS S3 File and media storage Global 1 year after client contract termination Communication & CRM Subprocessor Purpose Location Retention Intercom Customer support chat and ticketing USA Up to 10 years (email logs) Customer.io Transactional and marketing emails USA Until opt-out or contract end HubSpot CRM & marketing automation USA Until opt-out or request to delete Billing & Invoicing Subprocessor Purpose Location Retention Zoho Billing Subscription management and invoicing India As per statutory limits Analytics Subprocessor Purpose Location Retention Segment (Twilio) Event tracking and customer data pipeline USA 1 year Mixpanel Product usage analytics EU 1 year Microsoft Clarity Product and session analytics (heatmaps, session replay) USA 30 days to 13 months Application Security Subprocessor Purpose Location Retention Talsec (Lynx SFT s.r.o., Czech Republic) Mobile app runtime self-protection (freeRASP SDK). Receives device and app integrity diagnostics from the Asanify mobile app: root/jailbreak, emulator, hooking-framework and tampering signals, device model, and an anonymous app-instance and device identifier. No HR, payroll, employee-record or contact data is sent. USA (AWS) Not published by the vendor Talsec is engaged under its published freeRASP Fair Usage Policy rather than a negotiated DPA, and also uses the diagnostics it receives for its own product improvement and aggregated security research. It therefore acts as an independent recipient for those purposes, rather than solely as a processor acting on Asanify’s behalf. AI & LLM Providers Subprocessor Purpose Location Retention Notes OpenAI (ChatGPT) AI-powered data enrichment and query automation USA 30 days* No training on client data; enterprise API used where applicable Anthropic (Claude) AI-powered HR and onboarding assistance USA 30 days* Used for classification and task automation *Retention may vary based on API configuration. We aim to use zero-data retention modes wherever feasible. Outbound Sales & Prospecting Subprocessor Purpose Location Retention Apollo.io B2B prospect data sourcing (company & contact business data) USA Until opt-out; non-responders purged 3 years after last contact Instantly.ai Cold-email sending & campaign management USA Until opt-out; non-responders purged 3 years after last contact Hunter.io Business email discovery (fallback when no direct contact email) USA (EU SCCs) Until opt-out; non-responders purged 3 years after last contact Compliance & Security All subprocessors are evaluated regularly for their security and compliance practices. Asanify enters into a Data Processing Agreement with equivalent obligations with each subprocessor that processes personal data on Asanify’s behalf. Providers listed under “Application Security” are engaged under their published standard terms and receive device-integrity diagnostics only, not customer or employee records. If you would like to be notified of changes to our subprocessor list, please email: [email protected] Last updated: 22 Aug 2026