Last updated: 8 September 2026
On this page
How to subscribe to changes
Legend
B. AI and model providers
C. Media, content, and creative
D. Analytics and observability
E. Communications
F. Business operations
G. Enrichment and utility APIs
H. Publishing destinations (not sub-processors)
How to subscribe to changes
We will give 30] days’ advance notice before adding or replacing a sub-processor that processes Customer Data. Subscribe at privacy@sociali.ai (subject: “Subprocessor notifications”) to receive that notice by email.
Customers with a signed DPA may object to a new sub-processor on reasonable data-protection grounds within the notice period. See DPA §6.
Legend
Customer Data — content, assets, and workspace data you upload or connect.
Account PII — names, emails, and account identifiers of your Authorised Users.
End-user PII — data about third parties that arrives from connected Channels (commenters, reviewers, audience).
Telemetry — logs, errors, performance traces, usage events.
A. Core infrastructure
Sub-processor
Entity / location
Purpose
Data processed
Region
Supabase
Supabase, Inc. — US
Primary database, authentication, file storage
Customer Data, Account PII, End-user PII, OAuth tokens
US — AWS us-west-1
Vercel
Vercel, Inc. — US
Application hosting, CDN, edge network
Customer Data in transit, Account PII, Telemetry
US
Google Cloud Platform
Google LLC — US
Compute (Cloud Run), object storage (GCS), secrets, logging, task queues
Customer Data, Telemetry, Account identifiers
us-central1
Inngest
Inngest, Inc. — US
Background job orchestration (scheduling, publishing, analytics sync)
Customer Data, job payloads
US
GitHub
GitHub, Inc. (Microsoft) — US
Source control, CI/CD
No Customer Data in normal operation
US
B. AI and model providers
These providers receive the content you submit to AI Features — post drafts, briefs, brand voice settings, uploaded images, and connected-account context.
Sub-processor
Entity / location
Purpose
Data processed
No-training / ZDR
OpenAI
OpenAI, L.L.C. — US
Text generation, image generation, embeddings
Customer Data (prompts, content)
No training — confirmed in writing
Anthropic
Anthropic PBC — US
Text generation
Customer Data
No training — confirmed in writing
Google (Gemini)
Google LLC — US
Text and image generation
Customer Data
Paid API / Google Cloud terms
xAI
X.AI LLC — US
Trend analysis
Customer Data, public trend queries
Commercial API terms
Perplexity
Perplexity AI, Inc. — US
Event and news research
Brand context, search queries
Commercial API terms
Replicate
Replicate, Inc. — US
Image generation
Customer Data (prompts, source images)
Commercial API terms
fal.ai
FAL AI, Inc. — US
Image and video generation
Customer Data (prompts, source images)
Commercial API terms
ElevenLabs
Eleven Labs Inc. — US
Text-to-speech voice-over in the creative editor
Customer Data (script text)
Commercial API terms
Google Cloud Vertex AI
Google LLC — US
Embeddings, vector search over your asset library
Customer Data, derived embeddings
us-central1
Google Cloud Vision
Google LLC — US
Image and template analysis
Customer Data (images)
us-central1
LangChain
LangChain, Inc. — US
LangSmith tracing and LangGraph Cloud hosted agent runtime
Customer Data (agent state; traces redacted of raw prompts for the CMO assistant)
US
C. Media, content, and creative
Sub-processor
Entity / location
Purpose
Data processed
IMG.LY
IMG.LY GmbH — Germany (EU)
Creative editor SDK (CE.SDK), asset CDN, AI creative plugins
Customer Data (designs, images)
Freepik
Freepik Company S.L. — Spain (EU)
Stock imagery, image upscaling (Magnific)
Search queries, images processed
Unsplash
Unsplash Inc. — Canada
Stock image search and import
Search queries
Transloadit
Transloadit Ltd. — [Germany / Netherlands — verify]
Uppy Companion — remote URL and Unsplash import proxy
Customer-selected remote media
Bright Data
Bright Data Ltd. — Israel
Residential proxy network for public web retrieval
Public web requests; [verify no Customer Data]
D. Analytics and observability
Sub-processor
Entity / location
Purpose
Data processed
Sentry
Functional Software, Inc. — US
Error tracking, performance monitoring
Telemetry, Account PII in error context
Segment
Twilio Inc. — US
Product analytics event pipeline
Account PII, usage events
PostHog
PostHog, Inc. — US
Product analytics (feature usage, user identification)
Account PII, usage events
Tinybird
Tinybird (Iterative Ventures S.L.) — US region
Analytics data warehouse
Customer Data (post content), analytics metrics, End-user PII
Pydantic Logfire
Pydantic Services Inc. — US
Application performance monitoring, LLM instrumentation
Telemetry, LLM prompts and responses
E. Communications
Sub-processor
Entity / location
Purpose
Data processed
Postmark
ActiveCampaign, LLC — US
Transactional email (invitations, alerts, reports)
Account PII, email content
Novu
Novu Inc. — US
In-app and multi-channel notification infrastructure
Account PII, notification payloads
Slack
Slack Technologies (Salesforce) — US
Internal operational alerting
Telemetry; [verify no Customer Data in alert payloads]
F. Business operations
Sub-processor
Entity / location
Purpose
Data processed
Stripe
Stripe, Inc. — US
Payment processing, subscription billing, tax
Billing contact details, payment data (Stripe is the controller of cardholder data; we never receive full card numbers)
ClickUp
Mango Technologies, Inc. — US
Internal project and documentation management
Internal only; [verify no Customer Data]
TidyCal
AppSumo — US
Demo scheduling
Prospect name, email, meeting details
G. Enrichment and utility APIs
Sub-processor
Entity / location
Purpose
Data processed
Tavily
Tavily — US
Web search for brand intelligence
Brand names, public search queries
RiteKit
RiteKit — [verify]
Hashtag suggestions
Post text fragments
Geoapify
Geoapify GmbH — Germany (EU)
Geocoding and places lookup
Location strings from brand/GBP data
AbstractAPI
Abstract API, Inc. — US
Public holiday calendar
Country/date only — no personal data
H. Publishing destinations (not sub-processors)
When you connect a Channel and publish, content and associated data are transmitted to the platform at your instruction. These platforms are independent controllers of the data on their own services, not our sub-processors. Their handling is governed by their own terms and privacy policies.
Platform
Operator
What we send / receive
Facebook, Instagram, Threads
Meta Platforms, Inc.
Publish content; read insights, comments, account identity
LinkedIn Corporation (Microsoft)
Publish content; read page analytics
TikTok
TikTok Pte. Ltd. / ByteDance
Publish content; read video analytics
Google Business Profile
Google LLC
Publish posts; read and reply to reviews, read performance metrics