Last Updated: August 17, 2026
AtmosAI, Inc. engages the third parties below to help deliver Marketing Titan, Lead Titan AI, and IT Titan. Each is bound by a written agreement imposing data protection obligations no less protective than our Data Processing Addendum, and we remain fully responsible to our customers for their performance.
Change notifications. We give at least 30 days' notice before adding or replacing a sub-processor. Subscribe to notifications to be told in advance. Customers may object on reasonable data protection grounds, as set out in Section 7.2 of the DPA.
Infrastructure and Platform
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, storage, compute | All categories | [SPECIFY REGIONS — e.g. us-east-1, eu-west-1] |
| Google Cloud EMEA Ltd / Google LLC | Cloud compute and data processing | All categories | [SPECIFY REGIONS] |
| [CDN / edge provider, if any] | Content delivery, DDoS protection | Technical data, IP addresses | [REGION] |
Payments and Billing
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing | Billing contact, payment tokens | United States |
Communications Infrastructure
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| [TELECOM PROVIDER — e.g. Twilio, Telnyx, Bandwidth] | Voice routing, SMS delivery, number provisioning | Phone numbers, call metadata, recordings, SMS content | [REGION] |
| [TRANSACTIONAL EMAIL PROVIDER — e.g. SendGrid, Postmark, Amazon SES] | Outbound email transmission and delivery tracking | Recipient addresses, email content, delivery metadata | [REGION] |
Data Verification and Enrichment
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| Reacher | SMTP-level email deliverability verification | Business email addresses | [REGION] |
| MillionVerifier | Email list verification and validation | Business email addresses | [REGION] |
| [PHONE VERIFICATION PROVIDER, if separate] | Phone number validation | Business phone numbers | [REGION] |
| [DATA LICENSING PARTNERS] | Licensed contact records | Business contact data | [REGION] |
Artificial Intelligence
Each AI provider below is configured to disable training on customer data where that option is available. See Section 4.4 of the DPA.
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| [LLM PROVIDER — e.g. OpenAI, Anthropic, Google] | Text generation, agent reasoning | Prompts, generated output | [REGION] |
| [IMAGE/VIDEO PROVIDER, if any] | Creative generation | Prompts, generated assets | [REGION] |
| [VOICE PROVIDER — e.g. ElevenLabs, Deepgram] | Speech synthesis, transcription | Voice audio, transcripts | [REGION] |
Operations and Support
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| [ANALYTICS / MONITORING — e.g. Datadog, Sentry] | Performance monitoring, error tracking | Technical and usage data | [REGION] |
| [SUPPORT TOOLING — e.g. Intercom, Zendesk] | Customer support | Account contact data, support conversations | [REGION] |
| [IDENTITY / AUTH PROVIDER, if any] | Authentication | Account credentials, session data | [REGION] |
Notes
Integration platforms are not sub-processors. CRM systems, calendars, inboxes, advertising platforms, and social networks that you connect through OAuth or an API key are independent controllers or your own processors. We access only the scopes you authorize, and you can revoke access at any time. Your relationship with them is governed by their terms, not ours.
International transfers. Where a sub-processor processes data outside the EEA or UK, transfers are made under the Standard Contractual Clauses or the UK Addendum, as described in Section 11 of the DPA.
Questions. privacy@marketingtitan.ai