Subprocessors

List of subprocessors

ChartMogul Technology Canada Ltd

• Address: 321 Water Street, Suite 501, Vancouver, BC V6B 1B8, Canada.
• Data Security Certifications: none; data processing agreement, with standard contractual clauses, in place.
• Data Processed: Potentially all data processed by ChartMogul as outlined in our data processing agreement.
• Use: This is a wholly owned and controlled subsidiary of the ChartMogul group that provides primarily Sales, Engineering, and Customer Support services to ChartMogul.

ChartMogul LLC

• Address: (17-101), 17F, 373 Gangnam-daero, Seocho-gu, 06621 Seoul, Korea.
• Data Security Certifications: none; data processing agreement, with standard contractual clauses, in place.
• Data Processed: Potentially all data processed by ChartMogul as outlined in our data processing agreement.
• Use: This is a wholly owned and controlled subsidiary of the ChartMogul group that provides primarily Design, Engineering, and Product services to ChartMogul.

ChartMogul Ltd

• Address: 71-75 Shelton Street, Covent Garden, WC2H 9JQ London, United Kingdom.
• Data Security Certifications: none; data processing agreement, with standard contractual clauses, in place.
• Data Processed: Potentially all data processed by ChartMogul as outlined in our data processing agreement.
• Use: This is the parent/holding company of the ChartMogul group that provides primarily Executive, Product, and Design, and related management services to ChartMogul within the ChartMogul group, including strategic oversight and support of the ChartMogul platform.

Amazon Web Services EMEA SARL (AWS)

• Address: 38 Avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg.
• Data Security Certifications: Several, including ISO27001, SOC 1, SOC 2, SOC 3; more available at https://aws.amazon.com/compliance/programs/.
• Data Processed: Any data we process as outlined in our data processing agreement may be processed by AWS, including data necessary to provide our optional AI-powered features, such as User prompts, AI-generated responses, and relevant account data.
• Use: All of ChartMogul’s infrastructure is hosted on AWS virtual servers. AWS also stores our database backups. These backups are fully encrypted. We also use AWS SES to send transactional emails (not marketing emails) from the ChartMogul application to our Users. Our core infrastructure is hosted in Ireland (eu-west 1). For Users who choose to use our optional AI-powered features, we use Amazon Bedrock to process prompts and relevant account data, generate AI responses, and provide the requested functionality using AWS infrastructure located within the European Union.
• ChartMogul implements technical, organisational, and contractual safeguards designed to protect data against unlawful access by governmental authorities outside the European Union. Governmental requests for access to data are reviewed to ensure compliance with applicable EU and Member State law.

More information about AWS’ data processing and data protection is available at https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

Google Ireland Limited (Google Workspace)

• Address: Gordon House, Barrow Street, Dublin 4, Ireland.
• Data Security Certifications: Several, including ISO27001, SOC 2, SOC 3; more available at https://workspace.google.com/learn-more/security/security-whitepaper/page-5.html.
• Data Processed: Potentially any data we process as outlined in our DPA may be processed by Google Workspace.
• Use: We use Google Workspace for all ChartMogul email, as well as for document and spreadsheet creation, editing, storage, and sharing.

More information about Google’s data processing and data protection is available at https://policies.google.com/.

Nylas, Inc.

• Address: 944 Market Street, San Francisco, CA 94102, USA.
• Data Security Certifications: Several, including ISO27001, SOC 2; more available at https://www.nylas.com/security/.
• Data Processed: User name, User email, email contents, other optional information a User submits or connects to the ChartMogul platform.
• Use: We use Nylas’ Email API to allow Users to connect their email accounts to the ChartMogul platform, and thereby display messages, with threads and attachments, and send emails via the ChartMogul platform.

More information about Nylas’ data processing and data protection is available at https://www.nylas.com/privacy-policy/.

Snowflake Computing Netherlands B.V.

• Address: FOZ Building, Gustav Mahlerlaan 300-314, 1082 ME Amsterdam, Netherlands.
• Data Security Certifications: ISO27001, SOC 2 Type II, SOC 1 Type II.
• Data Processed: ChartMogul replicates production data to Snowflake, so any data we process as outlined in our data processing agreement may be processed by Snowflake. Snowflake shall maintain all data as confidential information under the terms of the data processing agreement, complete with standard contractual clauses, ChartMogul executed with Snowflake. All data is hosted in the European Union (Ireland, eu-west 1).
• Use: Data warehouse solution and data analysis engine to improve the performance of our subscription analytics platform.

More information about security and privacy at Snowflake is available at https://www.snowflake.com/legal/ and https://www.snowflake.com/privacy-policy/.

Fireflies.ai Corp.

• Address: 5424 Sunol Blvd, Ste 10-531, Pleasanton, CA 94566, USA.
• Data Security Certifications: SOC 2 Type II.
• Data Processed: User or prospect name and email, video and voice recording, other optional information a User or prospect shares or submits.
• Use: We use Fireflies as an AI assistant to record and take notes during sales calls only with consent.

More information about Fireflies’ data processing and data protection is available at https://fireflies.ai/privacy_policy.pdf and https://fireflies.ai/dpa.

Jitsu Labs Inc.

• Address: 2261 Market Street #5039 San Francisco, CA 94114, USA.
• Data Security Certifications: SOC 2 Type I in progress, and thereafter Jitsu will pursue a SOC 2 Type II report.
• Data Processed: User email, IP address, tracking ID, phone number, device, browser, and operating system.
• Use: We use Jitsu to capture event data from various sources, including our application, website, and mobile application.

More information about data privacy at Jitsu is available at https://jitsu.com/privacy and https://jitsu.com/dpa.

OpenAI Ireland Ltd

• Address: 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.
• Data Security Certifications: SOC 2 Type II, CSA STAR Level 1.
• Data Processed: User email, publicly available information from website.
• Use: We use OpenAI to provide Users with a data enrichment feature leveraging artificial intelligence (AI) technology to enhance their customer data by extracting information from publicly available websites of their customers.

More information about data privacy at OpenAI is available at https://openai.com/policies/privacy-policy/.

Help Scout PBC

• Address: 68 Harrison Ave #605, PMB 78505, Boston, MA 02111, USA.
• Data Security Certifications: SOC 2 Type II report.
• Data Processed: User name, User email, other communication and optional information a User submits.
• Use: We use Help Scout to provide customer support and ticketing.

More information about data privacy at Help Scout is available at https://www.helpscout.com/company/legal/dpa/ and https://www.helpscout.com/company/legal/privacy/.

Vercel Inc.

• Address: 440 North Barranca Avenue #4133, Covina, CA 91723, USA.
• Data Security Certifications: SOC 2 Type II report.
• Data Processed: Potentially any data processed in Help Scout, including User name, User email, other communication and optional information a User submits.
• Use: We use Vercel to host web applications that integrate with Help Scout, our customer support ticketing system. These applications fetch and display data from other tools to improve support workflows, and Vercel processes the data to render it, but does not store the data.

More information about data privacy at Vercel is available at https://vercel.com/legal/dpa and https://vercel.com/legal/privacy-policy.

Linear Orbit, Inc.

• Address: 2261 Market St STE 10632, San Francisco, CA 94114, USA.
• Data Security Certifications: SOC 2 Type II report.
• Data Processed: We do not routinely transfer personal data to Linear. However, in limited cases — such as during internal investigations — incidental personal data such as User name and User email may be processed.
• Use: We use Linear to manage internal tickets and track projects and tasks.

More information about data privacy at Linear is available at

https://linear.app/dpa and https://linear.app/privacy.

Datadog, Inc.

• Address: 620 8th Avenue, 45th Floor, New York, NY 10018, USA.
• Data Security Certifications: SOC 2 Type II. More information is available at https://www.datadoghq.com/trust/.
• Data Processed: Datadog may process information associated with the use of ChartMogul's platform and services, including information processed through ChartMogul's AI-powered features. Such information may include user prompts, AI-generated responses, and data retrieved from a customer's ChartMogul account in response to those prompts.
• Use: We use Datadog for monitoring, observability, troubleshooting, and performance analysis of the ChartMogul platform and services, including ChartMogul's AI-powered features.

More information about data privacy at Datadog is available at https://www.datadoghq.com/legal/privacy/ and https://www.datadoghq.com/legal/data-processing-addendum/.

Notice – July 1, 2026

ChartMogul has updated the scope of processing performed by Amazon Web Services EMEA SARL (AWS), an existing subprocessor. AWS may now also process customer data necessary to provide ChartMogul's optional AI-powered features through Amazon Bedrock. This update does not affect customers who do not use these features.

Last Updated: July 1, 2026