These are the service providers that RabbitSync uses to provide the Service and that process personal data on our behalf. Each is bound by a data processing agreement with data protection obligations at least as protective as our Data Processing Addendum.
Where a provider processes personal data outside the European Economic Area, the United Kingdom, Israel or another country with an adequacy decision, the transfer is protected by the European Commission's Standard Contractual Clauses (with the UK addendum), or by the provider's certification under the EU-US Data Privacy Framework.
The applications you connect to RabbitSync, such as Notion and Google Sheets, are not on this list. You choose them, and data flows to and from them on your instructions.
| Provider | Purpose | Personal data processed | Location |
|---|---|---|---|
| Amazon Web Services | Hosting the application, its databases and the workflow engine | All personal data held in our systems, including customer data in transit during a sync | European Union |
| Clerk | User sign-in and account management | Email address, name and profile picture where provided, sign-in sessions, IP address and browser details | United States |
| Anthropic | AI model for field-mapping and record-identity suggestions | Names and types of databases, sheets and fields; never record content | United States |
| OpenAI | AI model for the same suggestions, used as an alternative to Anthropic | Names and types of databases, sheets and fields; never record content | United States |
| Resend | Sending notification, support and marketing emails; receiving support emails; keeping the list of people who asked for marketing emails | Recipient email addresses, email content, delivery events, marketing subscription status | Sending: European Union (Ireland). Receiving and marketing lists: United States |
| PostHog | Product analytics | User and organization ids, usage events, country | European Union (Germany) |
| Linear | Our support team's workspace for support requests | Support request content and the requester's email address | United States |
| Google Workspace | Our support mailbox ([email protected]) | Support emails and the sender's email address | United States and other locations |
| Cloudflare | DNS, network security and delivery; spam check on the website's forms | IP addresses and request details | Global network |
| Better Stack | Hosting our public status page | IP addresses of visitors to the status page | European Union (Germany). Some of its own sub-processors, such as email delivery and file storage, are outside the EU, including in the United States |
Changes to this list
We tell customers about a new sub-processor at least 30 days before it starts processing customer personal data, by email to each account's admins and by updating this page. See section 5 of the Data Processing Addendum for how to object.