Sub-processors
Last updated
1.Current sub-processors
| Company | What for | What it receives | Where |
|---|---|---|---|
| Oracle Cloud Infrastructure (Oracle) | Servers, database and backups | Everything stored in Ballast | EU |
| Amazon Web Services (Amazon SES) | Delivers Ballast's own account emails: sign-up verification, password resets, invites, alerts | The recipient's email address and the text of that email. Never your campaigns, which leave from your own mailboxes | EU |
| Sentry (Functional Software, Inc.) | Error monitoring | Technical details of an error, user and workspace IDs, IP address | EU (Germany) |
| OpenAI | AI features: Write with AI and reply labelsOnly when an AI feature runs on our key | The text the feature works on: offer profile, website text, campaign copy or reply text | United States |
| Google (Gemini API) | Backup for the same AI featuresOnly if OpenAI is unavailable | Same as OpenAI | United States |
| Cloudflare | Serves your custom link domain (unsubscribe and click links in your emails)For workspaces with a custom link domain | IP address, browser details and the link requested by the person who opens a link | Global network, nearest to the visitor |
| Google (Analytics) | Visit statistics for the public websitePublic website only, never the app | Page address, referrer, browser and device type, approximate location from the IP address (not stored). No cookies | United States |
OpenAI and Google do not train their models on data sent through their APIs on our account, and keep requests only for a limited time to check for abuse. A workspace that connects its own AI key uses its own account with them instead.
2.Who is not on this list, and why
- Dodo Payments is our merchant of record. It sells you the subscription and handles your payment details as its own business, not on our behalf, and sees nothing inside your workspace.
- Services you connect: Google, Microsoft and other mailbox providers, email verifiers (MillionVerifier, ZeroBounce, NeverBounce), your webhook endpoints, AI assistants connected over MCP, and your own AI key. You choose them and they work under your account.
- Tools we run ourselves: the email delivery app for account emails and the website analytics (Plausible) run on our own servers in the EU.
- DNS lookups: domain checks ask public DNS and blocklists (Spamhaus and others) about domain names and mail server addresses only, never about people.
3.Changes
We email account owners at least 30 days before a new sub-processor starts handling customer data, and update this page. You can object as described in the Data Processing Agreement. Questions: contact@ballast.to.