Subprocessors
Third-party service providers Wexio, LLC engages to process personal data on behalf of our Customers.
Effective: July 15, 2026
This page lists the third-party subprocessors ("Subprocessors") that Wexio, LLC ("Wexio") engages to process personal data on behalf of our Customers in connection with the Wexio platform. Each Subprocessor undergoes a security and privacy review before engagement, and we maintain contractual safeguards, including Data Processing Agreements consistent with Article 28 of the GDPR, with each Subprocessor listed below. We share only the minimum data necessary for each Subprocessor to perform its function.
The list below reflects Subprocessors that may process personal data in the managed storage mode. Where a Customer uses Bring-Your-Own-Storage, conversation data is stored in the Customer's own infrastructure rather than in the infrastructure Subprocessors below, though other Subprocessors (for example, AI, payment, and channel providers) may still be engaged to provide the requested functionality. If you have questions about any Subprocessor, contact privacy@wexio.io.
Categories
1. Infrastructure and Hosting
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services | Cloud hosting, compute, storage, and managed databases | All platform data (encrypted at rest and in transit) | EU (Ireland) |
| Vercel | Edge hosting, CDN, and serverless functions | Web traffic, request metadata | EU (Ireland) / Global edge |
| MongoDB Atlas | Managed database for application data | Application, user, and conversation data | EU (Ireland) |
| Upstash | Serverless cache for rate limiting and queues | Cache keys, session tokens, counters | EU (Ireland) |
2. AI and Machine Learning
These processors are engaged when AI features are used. Where a Customer uses Bring-Your-Own-Key, AI processing occurs under the Customer's own agreement with the provider.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| OpenAI | AI responses, summarization, and analysis | Conversation messages, prompts (not retained for training per provider terms) | US / EU |
| Anthropic | AI responses and conversation analysis | Conversation messages, prompts (not retained for training per provider terms) | US / EU |
3. Email and Communications
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Resend | Transactional and notification email | Email addresses, content, delivery metadata | US |
4. Payments
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing and subscription management | Billing information, payment tokens, invoice data | US / EU |
5. Messaging Channels
These processors handle messages when you connect the respective channel integrations.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Meta Platforms | WhatsApp Business API and Instagram messaging | Messages, media, contact information | US / EU |
| Telegram | Telegram Bot API messaging | Messages, media, user identifiers | Global |
| Viber (Rakuten) | Viber messaging API | Messages, media, user identifiers | Global |
6. Scheduling and Calendar
These processors are engaged only when you activate the corresponding scheduling integration.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Calendar | Calendar and scheduling integration | Event details, attendee contact data | US / EU |
| Calendly | Appointment scheduling integration | Booking details, invitee contact data | US |
| Cal.com | Appointment scheduling integration | Booking details, invitee contact data | US / EU |
7. CRM and Data Integrations
These processors are engaged only when you activate the corresponding integration.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| HubSpot | CRM contact sync and activity logging | Contact details, conversation summaries, activity logs | US / EU |
| Salesforce | CRM contact sync and activity logging | Contact details, conversation summaries, activity logs | US / EU |
| Google BigQuery | Data warehouse for analytics and reporting | Anonymized usage data, aggregated metrics | EU (Frankfurt) |
8. Analytics and Monitoring
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Analytics 4 | Website traffic and behavior analysis | Anonymized page views, session and device data | EU |
| Google reCAPTCHA | Bot detection and abuse prevention | Interaction and device signals | US |
9. Changes to This List
We may update this list as our service providers change. We will notify affected Customers at least 7 days before engaging a new Subprocessor that processes personal data. If you object to a new Subprocessor, you may terminate the affected services by written notice within the notification period, in accordance with your Data Processing Agreement.
Wexio, LLC
Privacy contact: privacy@wexio.io