Home / Trust / Sub-processors
Sub-processors
Sub-processors are the third parties Appice engages to help deliver the service. We disclose them all, who they are, what they do, and where they operate. Customers can subscribe to be notified at least 30 days before any new sub-processor is added.
Infrastructure (cloud hosting)
| Sub-processor | Purpose | Region(s) where data resides | DPA |
| Amazon Web Services, Inc. | Cloud hosting, compute, storage, KMS, backups | India (Mumbai, Hyderabad), GCC (Bahrain, Riyadh), EU (Frankfurt, Ireland) — per workspace region | AWS GDPR DPA |
| Microsoft Azure | GCC region — secondary availability for KSA-resident customers | Saudi Arabia | Microsoft DPA |
| Cloudflare, Inc. | CDN, DDoS protection, WAF for marketing site (no customer event data passes through) | Global (control plane US; data plane edge-only) | Cloudflare DPA |
Operational tooling
| Sub-processor | Purpose | Data accessed | Region |
| Datadog, Inc. | Application performance monitoring, error tracking, log analytics | Aggregated and anonymized telemetry; no raw event payloads | EU (Frankfurt) for EU customers; US for global metadata |
| PagerDuty, Inc. | Incident response routing | Incident metadata only | US |
| Atlassian (Jira / Confluence) | Internal ticketing and runbooks | Support ticket content; not customer event data | EU (Frankfurt) |
| GitHub, Inc. | Source code management | No customer data | US |
| Snyk Ltd. | Dependency vulnerability scanning | No customer data | UK / US |
Customer-channel delivery
Used only when the customer instructs Appice to deliver via these channels.
| Sub-processor | Purpose | Data accessed | Region |
| Apple Push Notification service (APNs) | Push delivery to iOS devices | Device token + payload | Apple-managed global |
| Firebase Cloud Messaging (Google) | Push delivery to Android devices | FCM token + payload | Google-managed global |
| Twilio Inc. / SendGrid | SMS and email delivery (when customer routes via Twilio/SendGrid) | Recipient address + message body | Customer-selected; EU and India endpoints available |
| Sinch / MessageBird / customer-chosen vendor | SMS for customers using their own SMS gateway via Inform | Recipient + message | Per customer's vendor selection |
Customer support
| Sub-processor | Purpose | Data accessed | Region |
| Zendesk | Customer support ticketing | Support ticket content (customer-shared); not raw event data | EU |
| Calendly | Scheduling for support and onboarding calls | Email and meeting metadata | US |
Affiliated entities
| Entity | Role |
| Semusi Technologies Pvt. Ltd. (Bengaluru, India) | Parent entity. Provides engineering, support, and operations. |
| Appice MEA FZ-LLC (Dubai, UAE) | GCC commercial entity. Provides sales and account management. |
Notification of changes
We notify subscribed customers at least 30 days before adding a new sub-processor. Customers may object to a new sub-processor in writing within the notice period; if the objection cannot be reasonably resolved, the customer may terminate the affected service.
Subscribe to sub-processor updates. Email privacy@appice.ai with the subject line "Subscribe to sub-processor updates" and the workspace ID(s) you cover.
Related