This page lists the sub-processors Sent, Inc. ("Sent") engages to process Personal Data on behalf of its customers under the Data Processing Addendum, as referenced in section 2.7 of that addendum. Each entry names the provider, what it does for Sent, the data it receives, where it processes that data, and the mechanism that covers any transfer out of the European Economic Area, the United Kingdom, or Switzerland.
Providers that process data about Sent's own customers, such as billing, support, and analytics services, are described by category in the Privacy Policy and are not sub-processors under the Data Processing Addendum.
1. Infrastructure
- Google Cloud (Google LLC, United States). Hosting, databases, object storage, logging, and secrets management for the Sent platform. Receives all customer and recipient data the platform processes. Transfer mechanism: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
- Cloudflare, Inc. (United States). DNS, TLS termination, content delivery, and web application firewall for Sent's domains. Receives request metadata and, in transit, request contents. Transfer mechanism: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
2. Messaging platforms
- Meta Platforms, Inc. and Meta Platforms Ireland Limited (United States and Ireland). WhatsApp Business Platform, for messages on WhatsApp. Receives the recipient phone number and the message content for those messages. Transfer mechanism: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
Telecommunications providers
The telecommunications providers Sent uses to route and deliver SMS, MMS, and RCS messages, including the network lookups needed to route a message, are not sub-processors. A message transits their networks without being disclosed to them: confidentiality-of-communications law bars them from reading it, they do not choose the recipient or alter the content, and they hold it only as long as transmission takes. They act as conduits under their own telecommunications obligations, which is the position the industry and supervisory authorities take.
3. Artificial intelligence services
Used only when a customer chooses the template assistant in the dashboard. Each receives the template text the customer is drafting and nothing about the recipients.
- OpenAI, L.L.C. (United States). Transfer mechanism: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
- Anthropic, PBC (United States). Transfer mechanism: Standard Contractual Clauses.
4. Changes to this list
Sent adds a sub-processor only after it has agreed data protection terms that provide at least the level of protection the Data Processing Addendum provides.
To be notified before this list changes, email privacy@sent.dm with the subject "Sub-processor updates". Subscribers receive notice at least 30 days before a new sub-processor begins processing Personal Data and may object as described in section 2.7(b) of the Data Processing Addendum.
5. Contact
Questions about this list or about a specific provider go to:
- privacy@sent.dm