GDPR Subprocessors
For enterprise procurement, security, and compliance teams
A current, dated list of every third-party subprocessor MangoApps engages to process personal data on customers' behalf, with purpose and hosting region for each. Material changes are handled in accordance with the applicable Data Processing Agreement. Where Customer Data is hosted outside the United States, U.S.-based subprocessors process limited personal data under the Standard Contractual Clauses incorporated in the applicable DPA.
| Subprocessor | Purpose | Location |
|---|---|---|
| AccessiBe | Accessibility Service (optional) | USA |
| ADP | User Pay, Time-Off, Shifts (optional) | USA |
| Amazon Web Services (AWS) | Cloud Infrastructure, Hosting & AI Services | USA |
| Anthropic | AI Services (Claude LLM) | USA |
| Apple | APNS (iOS Push Notifications) | USA |
| Azure OpenAI | AI Services (optional) | USA |
| Box | Documents (optional) | USA |
| Bunny.net | Content Delivery Network & Video Streaming | Slovenia (EU) |
| DataForSEO | SEO & Search Data (marketing) | USA |
| Deepgram | Speech-to-Text Transcription | USA |
| Dropbox | Documents (optional) | USA |
| ElevenLabs | Text-to-Speech / Voice Narration (optional) | USA |
| Freshdesk | Federated Search (optional) | USA |
| Gitbook | Federated Search (optional) | USA |
| Go1 | Learning Content Library (optional) | Australia |
| Firebase Cloud Messaging (Push Notification), Firebase Performance Monitoring, Firebase Crashlytics (Crash Analysis), Google Translation Services, Google Analytics, Google Calendar, Google Drive, Google Gemini AI Services (optional) | USA | |
| Google Cloud Platform (GCP) | Cloud Storage, Document AI (OCR), Vertex AI & Discovery Engine, Firestore | USA |
| Intuit | Mandrill Mail Relay | USA |
| JIRA | Ticket Notifications (optional) | USA |
| Kaleyra | SMS Service (optional) | USA |
| Employee Advocacy | USA | |
| LiveKit | Real-time Voice & Video (WebRTC) | USA |
| Merge.dev | Integration Tools | USA |
| Microsoft | Outlook Calendar, Outlook Tasks, Outlook Email, One Drive, SharePoint, Teams, PowerBI, Delve, Stream, Team Meetings | USA |
| Mux | Live Video Streaming (HLS) | USA |
| OpenAI | AI Services | USA |
| OpenWeatherMap | Weather Data (optional) | United Kingdom |
| Pexels | Stock Imagery | Germany (EU) |
| Plaid | Financial Account Connectivity (optional) | USA |
| Salesforce | CRM (optional), Slack (optional) | USA |
| Scout APM | Performance Monitoring | USA |
| SendGrid (Twilio) | Transactional Email Delivery | USA |
| Sentry | Error Monitoring & Crash Reporting | USA |
| ServiceNow | Federated Search (optional) | USA |
| Stripe | Payment Processing & Billing | USA |
| Tableau | Data Visualization (optional) | USA |
| Tavily | Web Search Grounding for AI (optional) | USA |
| Twilio | SMS Service (optional) | USA |
| UKG | Shifts & Schedules (optional) | USA |
| Unsplash | Stock Imagery | Canada |
| Vapi | Voice AI Agents (optional) | USA |
| Webflow | Marketing Website CMS | USA |
| Wistia | Video Hosting | USA |
| Zendesk | Ticket Notifications (optional) | USA |
Last updated: July 08, 2026. This list may be updated periodically as we engage new subprocessors or discontinue existing ones. Customers will be notified of material changes in accordance with our Data Processing Agreement.
Need our enterprise DPA, SOC 2, HITRUST, or FedRAMP ATO letter?
Self-serve customers can review the DPA at /legal/dpa. Enterprise procurement teams can request the full document set - countersigned DPA, audit reports, certification letters, sub-processor history, and BCP/DR summary - in one packet.
