Subprocessors
Last Updated: 27 September 2026
Infrastructure and message delivery
| Subprocessor |
Region |
Location |
Purpose and data |
| Amazon Web Services (AWS) |
🇦🇺
AU
|
Sydney (ap-southeast-2) and Melbourne (ap-southeast-4) |
Hosting for our infrastructure: application servers, databases, message queues, file storage and outbound email delivery. All customer data at rest. |
| Telstra |
🇦🇺
AU
|
Australia |
Carriage of SMS, Email and other content to and from Australian recipients. |
| Optus |
🇦🇺
AU
|
Australia |
Carriage of SMS, Email, voice and other content to and from Australian recipients. |
| Vodafone |
🇦🇺
AU
|
Australia |
Carriage of SMS, Email, voice and other content to and from Australian recipients. |
| Ericsson |
🇦🇺
AU
🇺🇸
US
|
Australia and United States |
Carriage of SMS, Email, voice and other content to and from Australian or overseas recipients. |
| Twilio |
🇦🇺
AU
🇺🇸
US
|
Australia and United States |
Carriage of SMS, Email, voice and other content to and from overseas recipients. Used for voice services to our business phone lines. |
| Cloudflare |
🇺🇸
US
|
United States (global network) |
Authoritative DNS for our domains. DNS records only. Traffic is not proxied and TLS is not terminated by Cloudflare, no customer or payment data accessible. |
| Apple |
🇺🇸
US
|
United States |
Delivery and receipt of message data over Apple iMessage where unified messaging used. |
Platform services
| Subprocessor |
Region |
Location |
Purpose and data |
| Descope |
🇺🇸
US
|
United States |
Identity provider for single sign-on, used only by accounts that have SSO enabled. Handles login email address, name and authentication events for SSO customers. |
| Inspectlet |
🇺🇸
US
|
United States |
Session replay used by our support team to reproduce and diagnose reported faults. Disabled by default and switched on only for the pages or accounts under investigation. Captures dashboard screen content for the recorded session. |
| Square |
🇦🇺
AU
🇺🇸
US
|
Australia (Square AU Pty Ltd) and United States (Block, Inc.) |
Card payment processing for credit purchases and subscriptions. Card details are captured by Square directly and are never stored on our platform. |
Identity verification
| Subprocessor |
Region |
Location |
Purpose and data |
| InstaID+ (National Crime Check, nationalcrimecheck.com.au) |
🇦🇺
AU
|
Australia |
Identity verification where we are required to confirm the identity of an account holder or Sender ID applicant. Handles identity documents. |
Business operations
| Subprocessor |
Region |
Location |
Purpose and data |
| Google Workspace |
🇺🇸
US
|
United States |
Company email, calendars and documents. Holds business contact details for the people we deal with at customer organisations. No message content, contact databases or end-recipient data from the platform or production systems. |
| Google Tag Manager and Google Ads |
🇺🇸
US
|
United States |
Analytics and advertising tags on our website and dashboard. Records page visits, the referring page and advertising click identifiers, including Google, Meta and Microsoft ad click IDs. |
| Zendesk |
🇺🇸
US
|
United States |
Support ticketing. Holds the content of support requests and the contact details of the person who raised them. |
Subscribe to Updates