Sub-processors
The third parties that help us run Social9 and process customer personal data on our behalf.
Social9 uses the service providers below to deliver the Services. Each one is bound by written data protection terms at least as protective as our Data Processing Addendum, and is reviewed for security before we use it.
Current Sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, databases, file storage and backups | All Customer Data | United States |
| Cloudflare, Inc. | Content delivery, media delivery, DNS, DDoS protection and web application firewall | All Customer Data in transit; cached media files | United States and global edge network |
| Anthropic, PBC | AI content generation (Claude models) | Prompts and content submitted for AI generation | United States |
| OpenAI, L.L.C. | AI content generation | Prompts and content submitted for AI generation | United States |
| Google LLC | AI content generation (Gemini models) and website analytics (Google Analytics) | Prompts submitted for AI generation; website usage data | United States |
| OpenRouter, Inc. | Routing AI generation requests to model providers | Prompts and content submitted for AI generation | United States |
| Stripe, Inc. | Payment processing and subscription billing | Billing name, email, address and payment card details | United States |
| Mailazy | Transactional email delivery | Name, email address and email content | United States |
| SSOJet | Sign-in, social login and enterprise single sign-on (SAML, OIDC) | Name, email address, sign-in identifiers and identity provider attributes | United States |
AI Providers
AI providers receive only the content needed to generate a response. Under our agreements with them, they do not use Social9 customer content to train their models.
Social Media Platforms Are Not Sub-processors
When you publish to Facebook, Instagram, Threads, LinkedIn, X, TikTok, YouTube, Google Business Profile, Pinterest, Bluesky or Mastodon, the platform receives your content at your instruction and acts as an independent controller under its own terms. What Social9 accesses and stores from each platform is described in our Privacy Policy.
Changes and Notifications
We give at least 30 days' notice before adding or replacing a sub-processor. To be notified by email, write to [email protected] with the subject "Subscribe to sub-processor updates". Customers may object to a new sub-processor as described in section 5 of the DPA.