A subprocessor is a company we engage that may process customer data in the course of providing Intellisea. This page is the authoritative list. It is maintained under Article 28 of the UK and EU GDPR, and it is also the full answer to the question enterprise buyers and platform reviewers ask as "who do you share our data with?".
Each of these companies is engaged under terms requiring it to process data only on our instructions, to keep it confidential, and to apply appropriate security measures.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, compute, storage, databases and email delivery. All of the platform runs here. | All customer data: account details, content, chat history, media, and data retrieved from your connected integrations. | United States |
| Amazon Bedrock an AWS service |
Runs the AI models behind the agents. | Prompts and context sent to a model: your business facts, conversation history and the content being worked on. | United States |
| HeyGen | AI spokesperson video generation. | Scripts, avatar and voice selections, and the resulting video. | United States |
| Replicate, Inc. | AI image and media generation. | Generation prompts and the resulting media. | United States |
| Sync Labs (sync.so) | Audio and video synchronisation for generated video. | Audio and video files being processed. | United States |
| Stripe, Inc. | Subscription billing and payment processing. | Billing contact details, subscription and invoice records. Card details go to Stripe directly and are never held by us. | United States |
| Google LLC / Google Ireland Ltd | Analytics and advertising measurement on our public website only — see our Cookie & Tracking Notice. Not used inside the application. | Website visit data: IP address, pages viewed, and advertising identifiers. | United States, Ireland |
Your own connected accounts — your Facebook Page and Instagram professional account, your LinkedIn company Page and ad account, Google Ads, Google Analytics, Search Console, Business Profile, Tag Manager and Drive, WordPress and other connected websites, Slack, Microsoft Teams and Stripe — are not subprocessors. They are your services, which you authorise us to access on your behalf, and they remain under your control and their providers' terms. Data we retrieve from them is processed by the subprocessors listed above; data we send to them, such as a post you have asked an agent to publish, goes to your own account on that platform. Sections 3.5 to 3.7 of the Privacy Policy set out what is accessed on each.
Intellisea is hosted on Amazon Web Services in the us-east-1 region in the United States. Customer data is stored and processed there. If you access the platform from outside the United States, your data is transferred to the United States; section 10 of our Privacy Policy covers this.
Every subprocessor above that runs an AI model is engaged under terms that prohibit it from retaining customer data beyond what is needed to return a result, and from using that data to train or improve its models. This is what backs the commitment on our AI & Automation Disclosures page and in section 3 of the Privacy Policy.
We will give at least 30 days' notice before a new subprocessor begins processing customer data, by updating this page and notifying account owners by email. Customers with a signed Data Processing Addendum may object to a new subprocessor within that period by writing to privacy@intellisea.com; if we cannot resolve the objection, you may terminate the affected service.
To be told about changes, email us at the address below and ask to be added to the subprocessor notice list.
Questions about this list: privacy@intellisea.com.