Subprocessors

Last Updated: September 20, 2026

MarTech AI LLC uses the following third-party service providers (subprocessors) to help deliver our services.

Current Subprocessors

Service ProviderPurposeLocationData Transferred
Stripe, Inc.Payment processing and billingUnited StatesPayment details, billing information
Supabase, Inc.Database hosting and data storageUnited States (AWS)All application data
Sentry.ioError monitoring, performance tracking, and session replayUnited StatesError logs, stack traces, performance metrics, any content included in an error, and session replays with text masked and media blocked
Google LLCTransactional email delivery (Gmail SMTP) and website analytics (Google Analytics)United StatesEmail addresses, notification content; website usage data
OpenAI, L.L.C.AI Copilot, account setup, plain-language rules, rotating shift patterns you describe, and our free tools, including the free schedule generator: reading content you or a visitor submit, insights, and analyticsUnited StatesAI Copilot messages, employee names, shift patterns, workforce data used for insights, the text of rules you write, and content submitted to account setup or our free tools, including files and images
Anthropic, PBCAI agents that analyze cancellation feedback and prepare us for calls you bookUnited StatesFor a cancellation: organization name, account email address, manager name, plan, seat and employee counts, the reason and comments submitted, and session recordings viewed by the agent. For a booked call: name, email address, time zone, call time, booking answers, and, where the person already has an account, their name, role, business name, signup and trial dates, and most recent cancellation reason and comments
OpenAI, L.L.C.Advertising measurement (public pages, including signup and account setup)United StatesPublic-page activity, conversion events, subscription amount and plan, identifier derived from the account email address
Upstash, Inc.Session management and caching (Redis)United StatesSession tokens, temporary cache data
Vercel Inc.Application hosting and deployment infrastructureUnited StatesAll application data (hosting infrastructure)
PostHog, Inc.Product analytics and session replay (US Cloud)United StatesUsage events, session recordings (may include on-screen workforce information), diagnostic logs
Microsoft Corporation (Clarity)Public-page analytics and session replayUnited StatesPublic-page interactions, content displayed on public pages, device and browser information
Meta Platforms, Inc.Advertising measurement (public pages, including signup and account setup)United StatesPublic-page activity, conversion events, subscription amount, identifier derived from the account email address, advertising audience membership
Microsoft Corporation (Advertising)Advertising measurement (public pages, including signup and account setup)United StatesPublic-page activity, conversion events, identifier derived from the account email address, Microsoft advertising click identifier
Google LLC (Advertising)Advertising measurement (public pages, including signup and account setup)United StatesPublic-page activity, conversion events, identifier derived from the account email address, Google advertising click identifier, advertising audience membership
Reddit, Inc. (Advertising)Advertising measurement (public pages, including signup and account setup)United StatesPublic-page activity, conversion events, identifier derived from the account email address
Calendly LLCScheduling demo and setup callsUnited StatesName, email address, time zone, and anything else you enter on the booking form, if you book a call

Data Protection Measures

  • Subprocessors are engaged under their own published terms, which for most include data processing terms
  • Data transfers are handled in accordance with GDPR Article 28 requirements
  • Where applicable, providers offer Standard Contractual Clauses (SCCs) for international transfers under their data processing terms
  • Major providers publish independent security certifications

Notification of Changes

We update this page when we add or change subprocessors. Customers may object to the use of a new subprocessor by contacting us at contact@xshift.ai.

Need More Information?

Enterprise customers can request detailed security documentation, DPAs, and audit reports.

Contact: contact@xshift.ai

Subprocessors List | Third-Party Data Processors | XShift AI GDPR