GDPR Subprocessors
For enterprise procurement, security, and compliance teams
A current, dated list of every third-party subprocessor MangoApps uses to process personal data on customers' behalf — with the purpose and hosting region for each.
| Subprocessor | Purpose | Location |
|---|---|---|
| AccessiBe | Accessibility Service (optional) | USA |
| ADP | User Pay, Time-Off, Shifts (optional) | USA |
| Amazon Web Services (AWS) | Cloud Infrastructure, Hosting & AI Services | USA |
| Anthropic | AI Services (Claude LLM) | USA |
| Apple | APNS (iOS Push Notifications) | USA |
| Azure OpenAI | AI Services (optional) | USA |
| Box | Documents (optional) | USA |
| Bunny.net | Content Delivery Network & Video Streaming | Slovenia (EU) |
| Checkr | Background Checks (optional) | USA |
| DataForSEO | SEO & Search Data (marketing) | USA |
| Deepgram | Speech-to-Text inside Vapi Voice Agents (optional) | USA |
| DocuSign | E-Signature for Offers & Onboarding Documents (optional) | USA |
| Dropbox | Documents (optional) | USA |
| ElevenLabs | Text-to-Speech / Voice Narration (optional) | USA |
| Freshdesk | Federated Search (optional) | USA |
| Gitbook | Federated Search (optional) | USA |
| Go1 | Learning Content Library (optional) | Australia |
| Firebase Cloud Messaging (Push Notification), Firebase Performance Monitoring, Firebase Crashlytics (Crash Analysis), Google Translation Services, Google Analytics, Google Calendar, Google Drive, Google Gemini AI Services (optional) | USA | |
| Google Cloud Platform (GCP) | Cloud Storage, Document AI (OCR), Vertex AI, Gemini API & Discovery Engine, Firestore | USA |
| Intuit | Mandrill Mail Relay | USA |
| IPinfo | IP Geolocation for Attendance Clock-In Location Checks | USA |
| JIRA | Ticket Notifications (optional) | USA |
| Kaleyra | SMS Service (optional) | USA |
| Klipy | GIF Search in Chat | USA |
| Employee Advocacy | USA | |
| LiveKit | Real-time Voice & Video (WebRTC) | USA |
| Merge.dev | Integration Tools | USA |
| Meta Platforms (Muse Voice Transcribe) | AI Notepad cloud transcription — live meeting audio to text with speaker labels (optional: the admin's engine choice; on-device keeps audio on the laptop) | USA |
| Microsoft | Outlook Calendar, Outlook Tasks, Outlook Email, One Drive, SharePoint, Teams, PowerBI, Delve, Stream, Team Meetings | USA |
| Mux | Live Video Streaming (HLS) | USA |
| OpenAI | AI Services | USA |
| OpenStreetMap Foundation (Nominatim) | Address Geocoding for Work Locations | United Kingdom |
| OpenWeatherMap | Weather Data (optional) | United Kingdom |
| Parallel Web Systems (Parallel AI) | Web Research for Company Enrichment (marketing) | USA |
| Pexels | Stock Imagery | Germany (EU) |
| Plaid | Financial Account Connectivity (optional) | USA |
| Pusher (Bird) | Real-time messaging channels — chat, presence, live notifications | United Kingdom |
| Salesforce | CRM (optional), Slack (optional) | USA |
| Scout APM | Performance Monitoring | USA |
| SendGrid (Twilio) | Transactional Email Delivery | USA |
| Sentry | Error Monitoring & Crash Reporting | USA |
| ServiceNow | Federated Search (optional) | USA |
| Stripe | Payment Processing & Billing | USA |
| Tableau | Data Visualization (optional) | USA |
| Tango (Blackhawk Network) | Digital Gift-Card Reward Fulfilment (optional) | USA |
| Tavily | Web Search Grounding for AI (optional) | USA |
| Twilio | SMS Service (optional) | USA |
| UKG | Shifts & Schedules (optional) | USA |
| Unsplash | Stock Imagery | Canada |
| Vapi | Voice AI Agents (optional) | USA |
| Webflow | Marketing Website CMS | USA |
| Wistia | Video Hosting | USA |
| Zendesk | Ticket Notifications (optional) | USA |
| Zoom | Meeting Recording Import (optional) | USA |
Last updated: September 17, 2026. This list may be updated periodically as we engage new subprocessors or discontinue existing ones. Customers will be notified of material changes in accordance with our Data Processing Agreement.
Need our enterprise DPA, SOC 2, HITRUST, or FedRAMP ATO letter?
Self-serve customers can review the DPA at /legal/dpa. Enterprise procurement teams can request the full document set - countersigned DPA, audit reports, certification letters, sub-processor history, and BCP/DR summary - in one packet.
