Subprocessors
Updated:
Apr 1, 2025
To deliver our Services reliably, securely, and at scale, Empathiq engages a limited set of trusted third-party service providers ("subprocessors"). These subprocessors assist with hosting, analytics, communication, and compliance.
All subprocessors are contractually bound to uphold industry-standard security, confidentiality, and data protection requirements, including GDPR and HIPAA (where applicable).
Application & Hosting Infrastructure
Subprocessor | Purpose | Data Types | Location |
|---|---|---|---|
Amazon Web Services (AWS) | Hosting, storage, backups | Name, email, usage data | USA |
Fly.io | Application delivery | In-transit session data | USA |
Product Analytics
Subprocessor | Purpose | Data Types | Location |
Segment | Usage tracking infrastructure | Email, activity, metadata | USA |
Mixpanel | Product analytics | Email, feature usage | USA |
June.so | Behavior tracking | Email, usage patterns | USA |
Google Analytics | Site analytics | Anonymized behavior data | USA |
Communication & Support
Subprocessor | Purpose | Data Types | Location |
Intercom | Chat support & onboarding | Name, email, support messages | USA |
Slack | Internal communication | Name, email (indirect) | USA |
Billing & Payments
Subprocessor | Purpose | Data Types | Location |
Stripe | Payment processing | Billing info, name, email | USA |
Error Tracking
Subprocessor | Purpose | Data Types | Location |
Bugsnag | Bug detection and resolution | Name, email, session context | USA |
HIPAA-Specific
Subprocessor | Purpose | Data Types | Location |
Typeform | Script feature & PHI handling | Form responses (including PHI) | USA & EU |
Typeform is the exclusive subprocessor handling PHI via a HIPAA-compliant environment. Clients may sign a BAA directly with Typeform.
This list is reviewed regularly. For questions or to request a signed DPA, please contact hello@getempathiq.com.
Related Articles
Check articles from the same category
