Subprocessors

Effective Date: September 15, 2025

Last Updated: September 15, 2025

To deliver the Service, PhronEdge may engage third-party companies (“Subprocessors”) that process Customer Personal Data on our behalf. This page identifies our current Subprocessors, their purpose, and their location.

PhronEdge requires all Subprocessors to meet equivalent data protection and security obligations as set out in our Data Processing Addendum (DPA).


Current Subprocessors (Service Data)

Subprocessor

Purpose

Location(s)

Data Categories Processed

Amazon Web Services (AWS)

Primary cloud provider for hosting, compute, storage (S3, Aurora), networking, backups, secrets management (KMS/Parameter Store), monitoring/logging infra

US and/or EU (per tenant region)

Customer Data (stored content, compute, logs, backups, credentials)

Amazon Simple Email Service (SES)

Transactional email delivery (alerts, notifications)

US and/or EU (per tenant region)

Recipient email addresses, message subject/body (notifications)

SendGrid (Twilio Inc.)

Transactional email delivery (alerts, notifications)

US and/or EU (per deployment)

Recipient email addresses, message subject/body (notifications)

Weaviate B.V. (Weaviate Cloud)

Vector database and semantic search storage for embeddings and retrieval

US and/or EU (per tenant region)

Embeddings, metadata, related retrieval context

OpenAI, L.L.C. / Microsoft Azure OpenAI Service

Language processing to analyze and summarize Customer Data; configured to not use Customer Data for model training

US and/or EU (per deployment)

Customer-submitted text, model outputs, associated metadata (per feature scope)


Customer-Authorized Integrations (not Subprocessors)

These services connect only when a customer enables them. Data flows are governed by the customer’s configuration and the provider’s own terms.

  • Microsoft Graph / Teams (Microsoft) - org directory and Teams workspace sync

  • Slack Technologies, LLC - workspace sync and messaging data

  • GitHub, Inc. - repos, PRs, issues

  • GitLab B.V. - repos, PRs, CI/CD metadata

  • Bitbucket (Atlassian) - repos, PRs, issues, projects

  • Atlassian Jira Cloud - issues, projects, tickets

  • Azure DevOps (Microsoft) - repos, pipelines, boards/work items

  • Google Calendar (Google LLC) - calendar events, scheduling


Independent Controllers & Vendors (Billing/Payments)

  • Stripe, Inc. — Payment processing and billing.
    Acts as an independent controller for certain processing (KYC, payment details). Certified PCI DSS Level 1.


Subprocessor Notifications

  • PhronEdge will provide 30 days’ advance notice of new Subprocessors via this page and by email to the admin contact on file.

  • Customers may also subscribe to receive updates at subprocessors-updates@phronedge.com.

  • Customers may object on reasonable data protection grounds as described in the DPA.


Historical Subprocessors

If Subprocessors are removed, PhronEdge will update this list with the “Last Updated” date and archive prior versions for at least 12 months.


Questions

For questions regarding Subprocessors, contact:

© 2025 PhronEdge. All Rights Reserved

© 2025 PhronEdge. All Rights Reserved

© 2025 PhronEdge. All Rights Reserved