Legal

Sub-Processor List

Version archive

Version 1.1 - Effective 5 August 2026

This Sub-Processor List forms part of the Realytics Data Processing Addendum. It identifies Realytics Affiliates and third-party Sub-Processors authorised to Process Customer Personal Data on behalf of Realytics.

Realytics will update this list and provide notice as described in the DPA before authorising a new Sub-Processor to Process Customer Personal Data.


1Authorised Sub-Processors

Sub-Processor

Function

Location

Amazon Web Services, Inc.

Cloud infrastructure and storage

United States, Ireland, Germany

Google Cloud Platform (Google LLC / Google Ireland Ltd)

Cloud infrastructure, data warehousing

United States, European Union

Hetzner Online GmbH

Dedicated server hosting and data centre facilities

Germany, Finland

Cloudflare, Inc.

Content delivery, traffic management and edge services

Processed at the data centre nearest the end user

Google Workspace (Google Ireland Ltd)

Business email, document storage and collaboration

European Union, United States

Stripe, Inc.

Payment processing and billing

United States, Ireland

HubSpot, Inc.

Customer relationship management

United States, European Union

Klaviyo, Inc.

Customer messaging and email delivery

United States

PostHog, Inc.

Product analytics

United States, European Union

OpenAI, L.L.C.

AI model inference for Services features

United States

Anthropic PBC

AI model inference for Services features

United States

Google LLC (Gemini / Vertex AI)

AI model inference for Services features

United States, European Union

Reality Analytics, Inc.

Group Affiliate - product development, customer support and administration

United States


2Notes

Hetzner Online GmbH provides dedicated bare-metal servers and data centre facilities. Realytics does not grant Hetzner access to Customer Personal Data and Hetzner does not Process Customer Personal Data on Realytics' behalf; it is listed for transparency as a provider of hosting infrastructure.

Meta Platforms, TikTok, LinkedIn and Google Ads are used by Realytics for its own marketing and advertising activities, in which Realytics acts as a Controller. They do not Process Customer Personal Data and are therefore not Sub-Processors under the DPA.

Realytics does not permit the Sub-Processors listed above that provide AI model inference to use Customer Personal Data to train their own models, and contracts with them on terms that exclude such use.


3Notice and Objection

Customers may subscribe to Sub-Processor change notices by contacting .

Customers may object to a new Sub-Processor on reasonable grounds relating to data protection within the notice period stated in the DPA.