Sub-processors
Last updated: 24 July 2026.
These are the third parties that process personal data on our behalf to run Dwelverson. Each is bound by a data-processing agreement, and every transfer outside the EEA relies on an adequacy decision, Standard Contractual Clauses, or the EU–US Data Privacy Framework. We will update this page and notify clients before adding a new sub-processor.
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Apollo.io | Prospect sourcing & enrichment | United States | SCCs / EU–US DPF |
| Zapmail | Cold-email mailbox provisioning (Google Workspace) | United States + other jurisdictions | Standard Contractual Clauses |
| Saleshandy | Cold-email campaign sequencing | India | Standard Contractual Clauses |
| TrulyInbox | Mailbox warm-up | India | Standard Contractual Clauses |
| Infomaniak | Company mailboxes | Switzerland | Adequacy decision (CH) |
| Resend | Transactional email & lead-digest delivery | United States | SCCs / EU–US DPF |
| Anthropic | Buyer-profile enrichment (AI inference) | United States | SCCs / DPF; zero-retention |
| DeepInfra | Large-model inference (lead judging) | United States | SCCs; no-training / zero-retention |
| Scaleway | Cloud hosting, storage, database, CDN, pipeline compute | France (EU) | Intra-EEA |
| Cloudflare | DNS, bot protection (Turnstile) | United States (+ edge) | SCCs / EU–US DPF |
| Paddle | Payments (Merchant of Record), tax, invoicing | United Kingdom / EU | Adequacy (UK) / SCCs |
Data sources (Reddit, Hacker News, Bluesky, X/Twitter, community forums) are the origin of public post data, not sub-processors of ours. Questions: privacy@dwelverson.com.