Sub-processors

Last updated October 15, 2026

Datarails engages the following sub-processors in connection with the provision of its Services. These sub-processors may process Customer Personal Data on Datarails’ behalf, as described below. For more information about Datarails’ processing of personal data, please refer to Datarails’ Data Processing Agreement.

Vendor	Description of Processing	Type of Data Processed	Location	Sub-processors’ Measures of Safeguarding Personal Data
Microsoft Azure (including Azure OpenAI)	Infrastructure, hosting, and AI-powered product features	User Content	US, Canada, UK, EU (Sweden)	https://learn.microsoft.com/en-us/azure/security/
MongoAtlas	Database hosting for application data and AI conversation sessions	User sessions	US, Canada, UK, EU (Sweden) (Determined by Azure location)	https://www.mongodb.com/trust
Cloudflare	DNS routing, network optimization, and DDoS edge security	Web traffic data and firewall	Worldwide, automatically managed by geo location	https://www.cloudflare.com/trust-hub/
Descope	Identity and access management, user authentication, single sign-on (SSO), and multi-factor authentication (MFA)	Customer Users’ email addresses, authentication credentials, and region attribute	US	https://trust.descope.com/
OpenAI	AI-powered data analysis, prompt responses, and text generation	User Content and User metadata	US	https://openai.com/security-and-privacy/
Mixpanel	Product usage analytics and user behavior tracking	User product-usage events, User profiles (email, name, last login), and device/click metadata	EU	https://mixpanel.com/legal/security/
Zendesk	Customer support ticket management, customer communications, issue tracking, and support request handling	Customer Users’ contact information, support requests, communications, attachments, Customer Content voluntarily submitted through support interactions, and related metadata	EU (Frankfurt, Germany)	https://www.zendesk.com/trust-center/
Workato	Workflow automation and integration between Customer systems and the Datarails platform	User Content contained in Customer systems that is processed as part of configured integrations	US	https://www.workato.com/legal/security
Quarterzip	AI-powered customer onboarding, user adoption, customer engagement, and post-sales guidance	Customer Users’ contact information (e.g., name and email), onboarding interactions, AI conversations, communications, and related metadata	US	https://trust.quarterzip.ai/
Twilio (SendGrid)	Email delivery and inbound email processing for customer communications and integrations	Customer communications, email content, attachments (where applicable), sender and recipient email addresses, and related metadata	US, EU	https://www.twilio.com/en-us/security
TrustNet	Managed Security Operations Center (SOC) logs and threat monitoring	Security event logs, system access tracks, and User IP addresses	US, Canada, UK, EU (Sweden) (Determined by Azure location)	https://trustnetinc.com/privacy/
Groundcover	Observability system (logs, metrics, traces)	System logs, execution traces, and cluster performance metrics	US (Datarails subscription)	https://trust.groundcover.com/
Gong	Recording, transcription, and analysis of sales, onboarding, and customer success calls and meetings with Customer Users	Customer Users’ contact information (e.g., name, email, and job title), call and meeting recordings, transcripts, and related metadata	US	https://trust.gong.io/
Zoom	Video conferencing for customer meetings, onboarding, training, and support sessions	Customer Users’ contact information, meeting content (audio, video, screen sharing, and chat), recordings (where enabled), and related metadata	US	https://www.zoom.com/en/trust/
Anthropic	AI-powered data analysis, prompt responses, agent execution, and text generation	User Content and User metadata	US	https://trust.anthropic.com/
Databricks	Data processing, analytics, and AI/ML workloads	User Content	US, Canada, UK, EU (Sweden) (Determined by Azure location)	https://www.databricks.com/trust

Affiliated Entities

In addition to the sub-processors listed above, the following entities are affiliated entities of Datarails, and may also function as sub-processors:

Entity Name	Entity Country
Datarails Inc.	United States
Datarails Ltd.	Israel

Change Log

The table below summarizes changes made to this list.

Date	Changes
October 15, 2026	Added: Gong, Zoom, Anthropic, and Databricks. Updated: added Sweden as a data location for Microsoft Azure, MongoAtlas, and TrustNet.
July 15, 2026	Added: Descope, OpenAI, Mixpanel, Zendesk, Quarterzip, Twilio (SendGrid), TrustNet, and Groundcover. Removed: Data Dog, SQL Sentry (via MadeiraData), and CloudAMQP. Updated: the description of processing and/or type of data processed for Microsoft Azure (including the addition of Azure OpenAI), MongoAtlas, Cloudflare, and Workato.