Subprocessors
OCCS engages a small number of third-party subprocessors to deliver the service. This page lists every subprocessor that may process customer personal data, the role they play, the legal entity, and where processing occurs. Updates are committed to source control; material changes are notified to customers per the DPA at least 30 days before they take effect.
Last updated: June 6, 2026 · 21 subprocessors total
Customer + contact PII
4 subprocessors
| Vendor | Legal entity | Role | HQ | Processing region | DPA |
|---|---|---|---|---|---|
|
People Data Labs
Contact enrichment
|
Nubela Pte. Ltd. dba People Data Labs | Contact data enrichment processor | USA | USA | DPA |
|
Stripe
Billing + payments
|
Stripe Payments Inc. | Payment + subscription processor | USA | USA / EU | DPA |
|
Shopify
E-commerce sync
|
Shopify Inc. | E-commerce data processor | Canada | USA / Canada | Standard ToS |
|
Google Sheets
Contact import
|
Google LLC | Contact-import data source (read-only) | USA | Global | Standard ToS |
Customer-authored content + metadata
13 subprocessors
| Vendor | Legal entity | Role | HQ | Processing region | DPA |
|---|---|---|---|---|---|
|
Postmark
Email delivery
|
ActiveCampaign LLC (Postmark) | Transactional + marketing email | USA | USA | DPA |
|
Twilio
SMS delivery
|
Twilio Inc. | SMS + 10DLC carrier delivery | USA | USA / EU | DPA |
|
Meta (Facebook + Instagram)
Social publishing + ads
|
Meta Platforms, Inc. | Social publishing + ads (customer-authored content) | USA | Global | DPA |
|
LinkedIn
Social publishing
|
LinkedIn Corporation | Social publishing | USA | Global | Standard ToS |
|
X (Twitter)
Social publishing
|
X Corp. | Social publishing | USA | Global | Standard ToS |
|
TikTok
Social publishing
|
TikTok Inc. | Social publishing | USA | Global | Standard ToS |
|
YouTube (Google)
Video publishing
|
Google LLC (YouTube) | Video publishing | USA | Global | Standard ToS |
|
Google Ads
Ad campaigns
|
Google LLC | Ad campaign processor | USA | Global | Standard ToS |
|
OpenAI
AI text generation
|
OpenAI, L.L.C. | AI text generation processor | USA | USA | DPA |
|
Replicate
AI image + video
|
Replicate, Inc. | AI image + video generation processor | USA | USA | Standard ToS |
|
ElevenLabs
AI voice
|
ElevenLabs Inc. | AI voice (TTS) processor | USA | USA | Standard ToS |
|
Render
Hosting
|
Render Services, Inc. | Application + database hosting (subprocessor of record) | USA | USA | DPA |
|
AWS S3 / Cloudflare R2
File storage
|
Amazon Web Services, Inc. / Cloudflare, Inc. | Object storage | USA | USA | Standard ToS |
Infrastructure + analytics
4 subprocessors
| Vendor | Legal entity | Role | HQ | Processing region | DPA |
|---|---|---|---|---|---|
|
Bannerbear
Image composition
|
Bannerbear Pte. Ltd. | Templated image composition | Singapore | USA | Standard ToS |
|
Moz Links API
SEO analytics
|
Moz, LLC | SEO analytics (domain-level only) | USA | USA | DPA |
|
Serper
Search analytics
|
Serper.dev | Search analytics | USA | USA | Standard ToS |
|
Sentry
Error monitoring
|
Functional Software, Inc. dba Sentry | Error + performance monitoring | USA | USA | DPA |
Notification of changes
Customers on a written DPA receive at least 30 days’ advance notice of any new subprocessor that will process their personal data, with the right to object. Notifications are sent to the workspace billing contact and posted at the top of this page during the notice window. Emergency replacements (e.g., where the prior subprocessor terminates service or is breached) may be expedited — we will notify and explain the abbreviated timeline in those cases.
Contact
Procurement and DPA questions: legal@1clickcampaign.com. Security questionnaires — see our trust & security overview and vulnerability disclosure policy.