Subprocessors

When we share your information with third party subprocessors, such as our vendors and service providers, we remain responsible for it. We work very hard to maintain your trust when we bring on new vendors, and we require all vendors to enter into data protection agreements with us that restrict their processing of Users' Personal Information (as defined in the Privacy Statement).

A subprocessor is a third party data processor engaged by HASH who agrees to receive personal data from us intended for processing activities to be carried out (i) on behalf of HASH customers; (ii) in accordance with customer instructions as communicated by HASH; and (iii) in accordance with the terms of a written contract between HASH and the subprocessor. Some subprocessors only handle data relating to a subset of HASH customers. Where multiple processing locations are listed for a service, the applicable location depends on each HASH customer's geographic location, the relevant terms of service, and specific technical factors.

Name of Subprocessor	Description of Processing	Location of Processing	Corporate Location
Anthropic	AI model services	US	US
Automattic	Displaying user profile pictures (Gravatars) in relation to hashed emails	US	US
AWS Bedrock	AI model services	US, EEA, UK or Ultra customer-chosen region(s)	US
AWS CloudWatch	Monitoring and operational data collection in the form of logs, metrics, and events	US, EEA, UK or Ultra customer-chosen region(s)	US
AWS EC2	Container management service	US, EEA, UK or Ultra customer-chosen region(s)	US
AWS GuardDuty	Threat detection service that continuously monitors for malicious activity and unauthorized behavior	US, EEA, UK or Ultra customer-chosen region(s)	US
AWS S3	Virtual storage used in conjunction with Amazon EC2 to store object data and replicate data across regions	US, EEA, UK or Ultra customer-chosen region(s)	US
AWS SES	Transactional email sending service	US, EEA, UK or Ultra customer-chosen region(s)	US
AWS SNS	Other communication services	US, EEA, UK or Ultra customer-chosen region(s)	US
Azure OpenAI Service	AI model services	US	US
Clearbit	Enhancing and cross-referencing user data to ensure it is accurate and up-to-date	US	US
Cloudflare	Content delivery network (CDN), data storage, and security services	US	US
GitHub	Community support and communication services	US	US
Google	Cloud computing and data storage services	US	US
Groq	AI model services	US	US
MailChimp	Customer communication services	US	US
OpenAI	AI model services	US	US
Sentry	Application error monitoring and remediation platform used to understand and resolve issues in our products. Incidental to this purpose, Customer and End User data may be processed by Sentry. Example data includes Customer and End User IP addresses, linked account IDs, user names, email addresses, and other types of data processed by HASH.	US, EEA (Germany)	US
Slack	Internal communication platform	US, EEA, UK	US
Stripe	Payment and fraud prevention services	US, EEA, UK	US
Zendesk	Customer support ticketing system	US, EEA, Japan, Australia	US
Zoom	Customer communication services	US	US

When we bring on a new subprocessor who handles our Users' Personal Information, or remove a subprocessor, or we change how we use a subprocessor, we will update this page.

If you have questions or concerns about a new subprocessor, we'd be happy to help. Please contact us via our support form.