Takes effect on 1 December 2026.
This Version 1.0 text is published ahead of its effective date for customer review. Existing customers transition as set out in Section 2.8 of the Terms of Service.
About this list
Sub-processors are the outside companies that handle our customers' personal data for us. This is the list that the Data Processing Agreement (Section 7) and the SMS Annex to the DPA (section 7) point to. It covers every Cloud Alter service, including Cloudfonica, Optima Saver and TextEnvoy.
Current sub-processors
| Company | What it does for us | Data it can see | Where |
|---|---|---|---|
| DigitalOcean, LLC | Hosts our servers, portals and support tickets, each SMS installation, and SMS backups | All customer data on those servers. SMS backups are encrypted before they leave the installation | The region you choose for a dedicated server, installation or backups; otherwise the United States, Singapore and the other DigitalOcean regions we use |
| Google LLC | Email, including service notices and support correspondence | Your contacts' email addresses, notice text and the content of emailed tickets | The United States and Google's other data-centre locations |
| Anthropic, PBC | An AI tool our staff use to help diagnose tickets and incidents | Technical logs with phone numbers masked and no message content or call audio, and health figures | The United States, or another location under its business terms |
| OpenAI, L.L.C. | An AI tool our staff use to help diagnose tickets and incidents | Technical logs with phone numbers masked and no message content or call audio, and health figures | The United States, or another location under its business terms |
| Google LLC | An AI tool our staff use to help diagnose tickets and incidents | Technical logs with phone numbers masked and no message content or call audio, and health figures | The United States, or another location under its business terms |
We use each AI tool only under business terms that bar training on your data.
Who is not on this list
- Our own employees, in Bangladesh and India, who operate and support the services. They work for Cloud Alter Inc. and are not sub-processors.
- Payment processors, such as PayPal, which handle our own billing data. The Privacy Policy covers them.
- Providers you choose, such as your SMS suppliers, carriers and gateways. They work for you, not for us.
Changes to this list
We give at least 15 days' notice of a new or replacement sub-processor, by updating this page and emailing your administrative contact. You may object as Section 7.3 of the Data Processing Agreement explains. If a sub-processor must be replaced urgently, for example for a security reason, we may replace it at once and tell you as soon as we can (Section 7.4).