Sub-processors
Last updated: 8 September 2026
This page lists the third parties that process personal data on our behalf to deliver Bubbling. It forms Annex III of our Data Processing Addendum.
Each one is engaged under a written contract that imposes data protection obligations no less protective than those we owe our customers, and we remain fully liable for what they do.
Current sub-processors
Used for every customer
| Sub-processor | What it does for us | Data it processes | Location |
|---|---|---|---|
| Google LLC / Google Cloud EMEA (Google Cloud Platform) | Hosting, application runtime, the Postgres database, secret storage, and job scheduling. This is where conversations are stored. | All Customer Data, account data, logs | us-central1, Iowa, United States |
| Anthropic PBC | The large language model that reads a conversation and produces the summary, the classifications, and the monitor matches. | Conversation content and the derived results | United States |
| Inffuse, operated by InLight Labs, our affiliate | Project and source configuration, and the delivery of alert and account email. | Account and configuration data, alert content, recipient email addresses | United States |
Used only when a customer turns the feature on
| Sub-processor | What it does for us | Data it processes | Location |
|---|---|---|---|
| Slack Technologies, LLC (Salesforce) | Delivers alerts to the customer's Slack workspace, once the customer connects one. | Alert content, which can quote conversation text, and the recipient channel | United States |
| Stripe, Inc. | Takes payment and issues invoices for paid plans. We never receive a full card number. | Billing contact details and payment metadata | United States |
Anthropic does not train its models on the data we send it. Our agreement with Anthropic prohibits it, and Section 3 of the Data Processing Addendum carries the same prohibition through to you.
InLight Labs is our affiliate, and it is still a sub-processor. Better Run, Inc. owns InLight Labs, which operates Inffuse. Common ownership changes nothing about how we treat it: it is a separate legal entity, it is engaged under a written data protection agreement on the terms this page describes, and it appears here so that you can object to it as you can to any other name on the list.
Not sub-processors
The chat platforms you connect (your website chat, your help desk, your marketplace app) are your own systems and your own vendors. We read from them on your instruction. They are not our sub-processors, and your agreement with each of them governs what it does.
Anyone else. We do not use advertising networks, data brokers, or third-party analytics that would receive Customer Data.
How we tell you about a change
We give at least 30 days notice before we add or replace a sub-processor. We update this page and we email the notice address on your account. To subscribe to that notice, or to object on reasonable data protection grounds, write to privacy@bubbling.ai. Section 7 of the Data Processing Addendum says what happens if we cannot resolve your objection.