Summary

Astra uses a number of third-party sub-processors and service providers to deliver, secure, and support its platform. This page lists all sub-processors by category, describing what data they handle and why they are used. We perform due diligence on every sub-processor before engagement and update this page whenever changes occur.

Who Should Read This

This page is relevant for customers, security teams, compliance officers, and data protection leads who need to understand how Astra handles and shares data with third parties for privacy assessments, vendor reviews, or regulatory requirements such as GDPR.

Sub-processor Categories

Application Infrastructure — Core services that store and process data about you and potentially your customers.

• Amazon Web Services — Cloud Service Provider — Privacy Policy

• Google LLC — Cloud Service Provider — Privacy Policy

• Vercel, Inc. — Hosting (web applications) — Privacy Policy

Platform Services — Services with limited, specific access to data for platform functionality.

• Paddle.com Market Limited — Payment processing — Privacy Policy

• Bright Market, LLC (FastSpring) — Payment processing — Privacy Policy

• SendGrid, Inc. — Transactional emails — Privacy Policy

• Peaberry Software Inc. (Customer.io) — Transactional emails, Messaging — Privacy Policy

• Cloudflare, Inc. — DNS, Compute, CDN, DDoS — Privacy Policy

• Axceptio.eu — Cookie consent — Privacy Policy

• Functional Software Inc. (Sentry) — Service error handling — Privacy Policy

• Raintank Inc. (Grafana Labs) — Monitoring and error handling — Privacy Policy

• Automattic Inc. (Gravatar) — Globally recognized avatars — Privacy Policy

• SmartBear Software Inc. — Service error handling, Performance tracking — Privacy Policy

Note: Monitoring tools do not routinely access your data, but may process it for troubleshooting purposes.

AI Services — Used in limited contexts to power specific product intelligence features.

• OpenAI OpCo, LLC — Generative AI services for intelligence product features — Privacy Policy

• Anthropic PBC — Generative AI services for intelligence product features — Privacy Policy

• Langfuse GmbH — AI observability, prompt tracing, model evaluation, and monitoring of AI-powered features — Privacy Policy

Note: OpenAI has restricted access to only the data necessary for delivering specific AI-driven functionality.

Marketing — Used to host and run marketing and communication. These services may store and process data about you but never access your customer data.

• Google LLC — Emails, Storage, SSO, Analytics, reCAPTCHA — Privacy Policy

• Microsoft Corporation — Bing UET, Clarity, Analytics — Privacy Policy

• Facebook, Inc. — Analytics — Privacy Policy

• Linkedin Inc. — LinkedIn Ads — Privacy Policy

• Joincube, Inc. (Beamer) — Changelog user notifications — Privacy Policy

• Sovereign Net LTD (Convertful) — In-app notifications and widgets — Privacy Policy

• Snovio Inc. — Email marketing — Privacy Policy

• Rocketlink — Link shortening — Privacy Policy

• Warm Welcome Inc. — User engagement — Privacy Policy

• Factors.ai — Audience journey, intent data and enrichment — Privacy Policy

• Make.com — Automation, workflow, integration — Privacy Policy

• Windscribe.com — VPN — Privacy Policy

• Tablepress.org — Publishing — Privacy Policy

• Hexomatic.com — Automation — Privacy Policy

• Markup.io — Collaboration, review and feedback — Privacy Policy

• Whimsical.com — Design, collaboration, review — Privacy Policy

• Hubspot.com — Marketing CRM — Privacy Policy

• Supademo — Product demos — Privacy Policy

• Customer.io — Email communication — Privacy Policy

• emailable.com — Email verification — Privacy Policy

• rb2b.com — Marketing — Privacy Policy

• Recepto.ai — Lead generation — Privacy Policy

Sales and Customer Success — Services that support sales workflows and customer interactions with limited data access.

• Pylon — CRM — Privacy Policy

• HubSpot, Inc. — CRM — Privacy Policy

• Crisp IM SAS — Chat and Statuspage — Privacy Policy

• Albacross Nordic AB — Analytics, Business Intelligence — Privacy Policy

• Customerly Limited — Chat support and newsletters — Privacy Policy

• Apollo.io — Lead generation and enrichment — Privacy Policy

Note: Customer service tools only access your data when a support request is raised.

Internal Tools — Used by the Astra team for internal operations. Your data is never shared via these tools.

• Slack Technologies, Inc. — Instant messaging — Privacy Policy

• Linear — Internal task management — Privacy Policy

• Docsketch, LLC (SignWell) — Document signing — Privacy Policy

• Zapier Inc. — Automation — Privacy Policy

• SaaS Labs US, Inc (HelpWise) — Email communication — Privacy Policy

• GitHub, Inc. — Project management — Privacy Policy

• Asana, Inc. — Project management — Privacy Policy

How We Manage Sub-processor Changes

Before engaging any sub-processor, Astra evaluates their privacy, security, and confidentiality practices and puts a formal agreement in place covering their obligations. This page is updated whenever a sub-processor is added, removed, or their usage changes. If you have questions about a specific sub-processor, contact our support team.