Last Updated: July 27, 2026
Adtool ApS (CVR: 45752577) uses the sub-processors listed below to help provide the Adtool.io services, as authorised under our Data Processing Agreement. Adtool reviews each sub-processor's data protection practices and enters into a data processing agreement with each of them before any processing begins. Separately, the analytics and marketing tools listed further below run on our marketing website in Adtool's own capacity as controller, not as sub-processors of customer data; they are described in our Privacy Policy.
We update this list at least 14 days before a new sub-processor begins processing customer personal data. Publication on this page constitutes notice of changes — check this page periodically. Objections are handled as described in Section 5 of the Data Processing Agreement.
Sub-processors (process customer personal data on Adtool’s behalf)
| Sub-processor | Purpose | Location / Transfer safeguard |
|---|---|---|
| Supabase Inc. | Database and authentication services | US (SCCs) |
| Vercel Inc. | Application hosting and delivery | US (DPF) |
| Cloudflare, Inc. | Temporary staging of large video uploads (transient; deleted after hand-off to Meta) | EU (data hosting); US entity (DPF) |
| Stripe Payments Europe Ltd (US importer: Stripe, LLC) | Payment processing | EU contracting entity; US transfers under the DPF (Stripe, LLC) |
| PostHog Inc. | Product analytics | EU (data hosting); US entity (DPF) |
| Upstash Inc. | Caching services | EU (data hosting, Frankfurt); US entity (DPF) |
| Cordnet OÜ (Featurebase) | Support, live chat, and feedback portal | Estonia (EU) |
| Crisp IM SAS | Customer support live chat (legacy; being replaced by Featurebase) | France (EU) |
| Astrodon Corporation (Loops) | Email communications | US (DPF; SCCs in the Loops DPA as a fallback) |
| Slack Technologies, LLC (Salesforce, Inc.) | Internal operational alerts | US (DPF) |
| Anthropic, PBC | AI inference for support and debugging tooling | US (SCCs) |
| OpenAI, L.L.C. | AI inference for support and debugging tooling | US (SCCs) |
Analytics and marketing tools (Adtool as controller; on the marketing website, consent-based)
These tools are not sub-processors of customer data. They are disclosed here for transparency and described in our Privacy Policy.
| Provider | Purpose | Location / Transfer safeguard |
|---|---|---|
| Google LLC / Google Ireland Limited | Google Tag Manager and Google Analytics 4 | US / EU (DPF) |
| Meta Platforms Ireland Ltd | Meta pixel (advertising measurement) | EU (Ireland); Meta is DPF-certified for US transfers |
| LinkedIn Ireland Unlimited Company | LinkedIn Insight Tag (advertising measurement) | EU (Ireland) |
| HubSpot, Inc. | Marketing analytics | US (DPF) |
| Cal.com, Inc. | Demo-booking widget | US (SCCs, per Cal.com’s data processing terms) |
"DPF" refers to the EU-U.S. Data Privacy Framework, which provides a legal mechanism for data transfers to the United States. "SCCs" refers to the Standard Contractual Clauses adopted by the European Commission in Decision (EU) 2021/914; see Section 6 of the Data Processing Agreement. The DPF certifications above were verified against the official Data Privacy Framework list (dataprivacyframework.gov) on 17 July 2026.
Integrations that are not sub-processors: The Meta integration operates on the customer's own ad accounts and business assets, under the customer's own agreements with Meta Platforms Ireland Ltd (or the Meta entity applicable to the customer); Adtool accesses the customer's Meta assets on the customer's behalf using the customer's authorization. The Google Drive integration, and, once launched, the Microsoft OneDrive integration, likewise operates on the customer's own account; in that context Google or Microsoft acts as the customer's processor, not as Adtool's sub-processor for file contents. Analytics and marketing tags managed via Google Tag Manager, on the website and in the platform, operate in Adtool's own capacity as controller, are consent-based, and are described in our Privacy Policy.
Some providers listed above also process personal data for Adtool's own purposes (for example billing, email communications, and analytics) in Adtool's capacity as controller; that processing is described in our Privacy Policy.
July 27, 2026: Notification wording updated — publication on this page constitutes notice of changes. Crisp IM SAS added (legacy support live chat, being replaced by Featurebase).
July 17, 2026: List reviewed and updated.