# Subprocessors

Source: https://dmand.ai/legal/subprocessors · Last updated: 2026-10-25

Legal

The providers that process customer data for Dmand AI, what each one does and where it processes the data.

Effective November 2, 2026

Last updated October 25, 2026

Revision history

In short

Effective November 2, 2026

Dmand AI runs on Google Cloud in the United States, behind Cloudflare. A small set of providers help us run the Platform: AI model providers for research and drafts, Stripe for payments, Twilio for calls, PostHog for product analytics, and the mailbox and deliverability providers behind managed mailboxes. Each is bound by a written agreement, processes data in the United States, and may use it only to provide its service to us. We email customers 30 days before we add one.

Key takeaways

- Every subprocessor processes data in the United States
- Each is bound by written data protection terms
- 30 days notice before we add a new one
- AI providers are set not to train on our data

## 1. What a subprocessor is

A subprocessor is a company we use that processes Customer Data, the data our customers bring to the Platform, so that we can provide the Platform to them. Our [Data Processing Addendum](https://dmand.ai/legal/dpa) allows us to use the subprocessors on this page and sets the rules they work under.

## 2. Our current subprocessors

_Dmand AI subprocessors_

| Subprocessor | What it does for us | Where |
| --- | --- | --- |
| Google Cloud Platform | Hosting, storage and backups for the Platform and all Customer Data | United States |
| Cloudflare | Network security, the web application firewall and access control in front of the Platform | United States |
| Google Workspace | Sign-in for our staff’s access to our infrastructure, and hosting and sending for managed mailboxes when a customer chooses Google | United States |
| Microsoft 365 | Hosting and sending for managed mailboxes when a customer chooses Microsoft | United States |
| OpenAI | AI research columns and AI-drafted emails: the business fields of a record and the User’s instruction | United States |
| Anthropic | AI research columns and AI-drafted emails: the business fields of a record and the User’s instruction | United States |
| Twilio | Phone numbers and calls for the dialer, and call recordings when a User turns recording on | United States |
| Stripe | Payment processing. We do not store card numbers | United States |
| PostHog | Product usage analytics in app.dmand.ai: feature events and errors | United States |
| Email verification provider | Checks whether an email address can receive mail before a sequence uses it | United States |
| Mailbox warm-up provider | Warms up managed mailboxes before they send sequences | United States |

Our accounts with OpenAI and Anthropic are set so that nothing we send is used to train their models.

## 3. Our own staff and contractors

Our staff and contractors in the United States and India may access Customer Data to run, support and secure the Platform. They do so under written confidentiality obligations and role-based access controls, and they do not read the content of customer emails except as the [Data Processing Addendum](https://dmand.ai/legal/dpa#personnel) allows.

## 4. How we choose and bind subprocessors

1. Before we use a provider, we review its security, where it processes data and its history of incidents.
2. Each one signs a written agreement with data protection and confidentiality terms, and may use Customer Data only to provide its service to us.
3. We remain responsible to our customers for what our subprocessors do with their data.

## 5. Providers that are not on this list

1. **Apps a customer connects.** Salesforce, HubSpot, Slack and the Google or Microsoft mailboxes a User connects are the customer’s own services, chosen by the customer. See [Connected apps](https://dmand.ai/legal/connected-apps) for what we access in each.
2. **Sources of our database.** The public records and licensed data providers behind Profile Data supply data to us; they do not process Customer Data. The [Privacy Policy](https://dmand.ai/legal/privacy-policy#profile-data) describes them.
3. **Website tools.** The analytics and marketing tools on dmand.ai are described in the [Cookie Policy](https://dmand.ai/legal/cookies).

## 6. Notice of changes

We update this page and email the account owner of every customer at least 30 days before a new subprocessor starts processing Customer Data. A customer may object on reasonable data protection grounds by writing to [hello@dmand.ai](mailto:hello@dmand.ai) within those 30 days, as the [Data Processing Addendum](https://dmand.ai/legal/dpa#subprocessors) describes. The dates of past changes are in the revision history below.

## 7. Contact

- **Company**: Launcheazy Inc
- **Mail**: Privacy requests, Launcheazy Inc, 360 S Baywood Ave, San Jose, CA 95128
- **Email**: [hello@dmand.ai](mailto:hello@dmand.ai)

## Revision history

_Revisions by date_

| Date | What changed |
| --- | --- |
| November 2, 2026 | First published list. |