GDPR Subprocessors
For enterprise procurement, security, and compliance teams
A current, dated list of every third-party subprocessor MangoApps uses to process personal data on customers' behalf — with the purpose and hosting region for each.
| Subprocessor | Purpose | Location |
|---|---|---|
| ADP | User Pay, Time-Off, Shifts (optional) | USA |
| Amazon Web Services (AWS) | Cloud Infrastructure, Hosting & AI Services | USA |
| Anthropic | AI Services (Claude LLM) | USA |
| Apple | APNS (iOS Push Notifications) | USA |
| Azure OpenAI | AI Services (optional) | USA |
| Box | Documents (optional) | USA |
| Bunny.net | Content Delivery & Video Streaming — images attached in App Builder's chat, and MangoApps training videos and images | Slovenia (EU) |
| Checkr | Background Checks (optional) | USA |
| Deepgram | Speech-to-Text inside Vapi Voice Agents (optional) | USA |
| DocuSign | E-Signature for Offers & Onboarding Documents (optional) | USA |
| Dropbox | Documents (optional) | USA |
| ElevenLabs | Text-to-Speech / Voice Narration (optional) | USA |
| Freshdesk | Federated Search (optional) | USA |
| Gitbook | Federated Search (optional) | USA |
| Go1 | Learning Content Library (optional) | Australia |
| Firebase Cloud Messaging (Push Notification), Firebase Performance Monitoring, Firebase Crashlytics (Crash Analysis), Google Translation Services, Google Calendar, Google Drive, Google Gemini AI Services (optional) | USA | |
| Google Cloud Platform (GCP) | Cloud Storage, Document AI (OCR), Vertex AI, Gemini API & Discovery Engine, Firestore | USA |
| IPinfo | IP Geolocation for Attendance Clock-In Location Checks | USA |
| JIRA | Ticket Notifications (optional) | USA |
| Klipy | GIF Search in Chat | USA |
| Employee Advocacy | USA | |
| LiveKit | Real-time Voice & Video (WebRTC) | USA |
| Merge.dev | Integration Tools | USA |
| Meta Platforms (Muse Voice Transcribe) | AI Notepad cloud transcription — live meeting audio to text with speaker labels (optional: the admin's engine choice; on-device keeps audio on the laptop) | USA |
| Microsoft | Outlook Calendar, Outlook Tasks, Outlook Email, One Drive, SharePoint, Teams, PowerBI, Delve, Stream, Team Meetings | USA |
| Mux | Live Video Streaming (HLS) | USA |
| OpenAI | AI Services | USA |
| OpenStreetMap Foundation (Nominatim) | Address Geocoding for Work Locations | United Kingdom |
| OpenWeatherMap | Weather Data (optional) | United Kingdom |
| Parallel Web Systems (Parallel AI) | Web Research for Company Profiles (the organization's name and website) | USA |
| Pexels | Stock Imagery | Germany (EU) |
| Plaid | Financial Account Connectivity (optional) | USA |
| Pusher (Bird) | Real-time messaging channels — chat, presence, live notifications | United Kingdom |
| Salesforce | CRM (optional), Slack (optional) | USA |
| SendGrid (Twilio) | Transactional Email Delivery | USA |
| Sentry | Error Monitoring & Crash Reporting | USA |
| ServiceNow | Federated Search (optional) | USA |
| Stripe | Payment Processing & Billing | USA |
| Tableau | Data Visualization (optional) | USA |
| Tango (Blackhawk Network) | Digital Gift-Card Reward Fulfilment (optional) | USA |
| Tavily | Web Search Grounding for AI (optional) | USA |
| Twilio | SMS Service (optional) | USA |
| UKG | Shifts & Schedules (optional) | USA |
| Unsplash | Stock Imagery | Canada |
| Vapi | Voice AI Agents (optional) | USA |
| Zendesk | Ticket Notifications (optional) | USA |
| Zoom | Meeting Recording Import (optional) | USA |
Last updated: October 24, 2026. This list may be updated periodically as we engage new subprocessors or discontinue existing ones. Customers will be notified of material changes in accordance with our Data Processing Agreement.
Need our enterprise DPA, SOC 2, HITRUST, or FedRAMP ATO letter?
Self-serve customers can review the DPA at /legal/dpa. Enterprise procurement teams can request the full document set - countersigned DPA, audit reports, certification letters, sub-processor history, and BCP/DR summary - in one packet.