Subprocessors

Last Updated: October 31, 2025

In accordance with GDPR Article 28, MarTech AI LLC uses the following third-party service providers (subprocessors) to help deliver our services. Each subprocessor has been carefully vetted for security and compliance.

Current Subprocessors

Service Provider	Purpose	Location	Data Transferred
Stripe, Inc.	Payment processing and billing	United States	Payment details, billing information
Supabase, Inc.	Database hosting and data storage	United States (AWS)	All application data
Sentry.io	Error monitoring and performance tracking	United States	Error logs, performance metrics
Google LLC (Gmail SMTP)	Transactional email delivery	United States	Email addresses, notification content
OpenAI, L.L.C.	AI Copilot - AI-powered analytics and insights	United States	Employee names, aggregated workforce statistics, shift patterns
Upstash, Inc.	Session management and caching (Redis)	United States	Session tokens, temporary cache data
Vercel Inc.	Application hosting and deployment infrastructure	United States	All application data (hosting infrastructure)

Data Protection Measures

All subprocessors are bound by Data Processing Agreements (DPAs)
Data transfers comply with GDPR Article 28 requirements
Standard Contractual Clauses (SCCs) are in place for international transfers
All subprocessors maintain enterprise-grade security certifications
Regular security audits are conducted on all subprocessors

Notification of Changes

We will notify customers at least 30 days in advance of adding any new subprocessor or making material changes to existing subprocessors. Customers may object to the use of new subprocessors by contacting us at contact@xshift.ai.

Need More Information?

Enterprise customers can request detailed security documentation, DPAs, and audit reports.

Contact: contact@xshift.ai