Sub-processors
Clerk.io engages the following third-party service providers ("sub-processors") to assist in delivering our services. Each provider is vetted for security and privacy, and is bound by contractual data-processing obligations.
Infrastructure & Hosting
Cloud Services
| Sub-processor | Purpose | Processing location |
| Amazon Web Services (AWS) | Primary cloud service provider for data storage and processing | EU (Frankfurt) – backups replicated to EU (Ireland) |
Monitoring & Analytics
| Sub-processor | Purpose | Processing location |
| Datadog, Inc. | Logs, metrics, and application performance monitoring | EU (Germany) |
| Functional Software, Inc. (d/b/a Sentry) | Error tracking (errors & events) | United States |
Messaging & Communications
Email Services
| Sub-processor | Purpose | Processing location | Notes |
| Mailgun Technologies, Inc. | Email delivery infrastructure | United States | Customer-selectable ESP |
| MessageBird B.V. (d/b/a SparkPost) | Email delivery infrastructure | United States | Customer-selectable ESP |
AI Processing
Large Language Model Inference
| Sub-processor | Purpose | Processing location | Notes |
| OpenAI, L.L.C. | Embedding generation for search, chat response generation, email draft generation | United States | Receives product & category catalogues and email body text; may also receive customer/order IDs and parcel tracking numbers depending on customer options |
Payments
Payment Processing
| Sub-processor | Purpose | Processing location |
| Stripe, Inc. | Payment processing for Clerk.io subscriptions | EU |
Data Protection
All sub-processors are contractually required to implement appropriate technical and organisational measures to safeguard personal data and to process such data solely for the purposes of providing their services to Clerk.io.
Updates to Sub-processors
We will notify customers at least 30 days in advance of any addition or replacement of sub-processors. Objections may be raised in accordance with our Data Processing Agreement (DPA).
Note: This list is maintained as part of our Data Processing Agreement (DPA). For the most up-to-date information, please refer to our official sub-processor registry.