Trust Center

Sub-processors

Categories and specific vendors that help us deliver the Services.

Last updated: 24 April 2026

The following list identifies the sub-processors that process customer personal data in connection with the Services. Categories rarely change; specific vendors within a category may change. We post updates here and notify customers under DPA of material additions before they take effect.

Subscribe to changes: email legal@opendoors.ai with “Sub-processor updates” in the subject and we will add you to the notification list.

Infrastructure

VendorPurposeRegion
Amazon Web Services, Inc.Primary application hosting, storage, and compute.US / EU
Vercel Inc.Front-end hosting and edge delivery for opendoors.ai.Global edge
Cloudflare, Inc.Content delivery, DDoS protection, and WAF.Global edge

Communications

VendorPurposeRegion
Twilio Inc.SMS, MMS, and voice connectivity.US / EU
Meta Platforms, Inc.WhatsApp Business, Messenger, Instagram integrations.US / EU
SendGrid / Mailgun (email delivery)Transactional and marketing email delivery.US / EU

Payments

VendorPurposeRegion
Stripe, Inc.Card processing, subscriptions, and connected accounts.US / EU
PayPal Holdings, Inc.Alternative payment rail for one-off and subscription billing.US / EU

Productivity

VendorPurposeRegion
Google LLCCalendar, Business Profile, Ads, and Analytics integrations.US / EU
Microsoft CorporationOutlook/M365 calendar and mail integrations.US / EU
Zoom Video Communications, Inc.Video conferencing links on calendar bookings.US / EU

AI

VendorPurposeRegion
OpenAI / AnthropicLarge-language-model inference for AI features (on an opt-in and no-training-on-customer-data basis).US
ElevenLabsVoice synthesis for Voice AI.US / EU

Support & Analytics

VendorPurposeRegion
Intercom / ZendeskCustomer support ticketing and chat.US / EU
Segment / Mixpanel / PostHogProduct analytics and event streaming.US / EU
Sentry / DatadogError monitoring and performance observability.US / EU

How we evaluate sub-processors

  • Security posture — SOC 2, ISO 27001, or equivalent evidence of independent audit.
  • Privacy posture — ability to sign a DPA with SCCs where relevant.
  • Business resilience — availability, redundancy, and incident track record.
  • Data minimisation — only the data strictly needed to perform the service.

Right to object

Under our DPA, customers may object to a new sub-processor on reasonable grounds. If we cannot accommodate an objection, the customer may terminate the affected service with a pro rata refund of unused fees.

Questions about this page? Contact privacy@opendoors.ai.

← Back to Privacy & Security