Sub-processors
The third parties that process personal data on behalf of Outiy customers, what each one does, and where. We give at least 30 days’ notice before adding or replacing one.
Last updated 15 September 2026
Contents
Infrastructure and operations
| Company | Purpose | Data processed | Location |
|---|---|---|---|
| Oracle Corporation (Oracle Cloud Infrastructure) | Hosting, databases, file storage, key management, system email | All Customer Data | United States; European Union for EU-hosted workspaces |
| Cloudflare, Inc. | Content delivery, DNS, DDoS protection, web application firewall, custom tracking domains | Network traffic, IP addresses, request metadata | Global edge network; United States |
| Razorpay Software Private Limited | Payment processing and subscriptions | Billing contact, payment details (entered directly with Razorpay) | India |
Artificial intelligence
| Company | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic, PBC | Writing, translation, reply drafting, business profile generation, support assistant | The text of the request: lead name, company, role and the customer’s own content | United States |
| OpenAI, L.L.C. | The same, as an alternative provider when the primary is unavailable | As above | United States |
| Google LLC (Gemini API) | The same, as an alternative provider when the primary is unavailable | As above | United States |
None of these providers uses data sent through their business APIs to train its models. Requests go to only one provider at a time.
Email verification and data services
| Company | Purpose | Data processed | Location |
|---|---|---|---|
| MillionVerifier | Checking whether an email address exists, without sending mail | Email addresses | To be confirmed |
| People Data Labs, Inc. | Licensed business contact data and enrichment | Name, employer, job title, work email | United States |
| Apify Technologies s.r.o. | Collecting public, logged-out business profile pages (switched off for EU and UK recipients) | Public profile addresses and business details | European Union (Czech Republic) |
| Serper | Web search results used to find company websites | Search queries (no customer contact data) | To be confirmed |
| Outscraper | Public map and business listings | Search queries (no customer contact data) | To be confirmed |
Services you choose to connect
When you connect Gmail, Google Calendar, Microsoft 365, a CRM (such as HubSpot, Salesforce, Pipedrive or Zoho), Slack, Microsoft Teams, Zapier, Make or your own webhook, data flows to that service because you direct it to. Those services are not our sub-processors; your own agreement with them applies.
Updates
To be told about changes, email privacy@outiy.com with the subject "Sub-processor updates". Customers may object to a new sub-processor as described in section 5 of the Data Processing Agreement.