Sub-Processors
Last Updated: October 13, 2026
Opportify, Inc., a Delaware corporation ("Opportify"), engages the following third-party sub-processors to assist in delivering its services. All sub-processors are bound by contractual obligations that require them to protect personal data to a standard consistent with Opportify's Privacy Policy and applicable data protection law, including the GDPR where applicable.
Where required under applicable data protection law (including GDPR Article 28), Opportify will notify customers of any intended additions or replacements to this list with reasonable advance notice. Customers who have executed a Data Processing Addendum (DPA) with Opportify may object to new sub-processor additions in accordance with the terms of that DPA.
We distinguish two groups below. The first group processes customer data submitted to Opportify for analysis, on Opportify's behalf and under the Data Processing Addendum. The second group supports Opportify's own business operations (billing, accounting, communications, and engineering). Customer data submitted for analysis is not shared with the providers in the second group.
Platform Sub-Processors (Customer Data Processed Under the DPA)
These providers process customer data that is submitted to Opportify for analysis, on Opportify's behalf.
| Sub-Processor | Role | Data Processed | Processing Location | Transfer Mechanism |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and hosting | All data processed by the Opportify platform (account data, API request/response data, fraud telemetry, billing records) | United States | Standard Contractual Clauses (SCCs) / AWS DPA |
| BetterStack | Observability, uptime monitoring, and log management | Application logs, error events, and infrastructure metrics (may incidentally include request metadata) | European Union (EU) | EU-based processing / BetterStack DPA |
Operational Service Providers (Opportify Business Operations)
These providers support Opportify's own business operations and process Opportify's business and account-holder information. They do not receive customer data submitted to Opportify for analysis.
| Service Provider | Role | Data Processed | Processing Location | Transfer Mechanism |
|---|---|---|---|---|
| Stripe | Payment processing and billing | Billing information, payment method details, transaction history, name, and billing address | United States / EU | Standard Contractual Clauses (SCCs) / Stripe DPA |
| Xero | Accounting and financial record management | Customer name, billing address, invoice records, and transaction data required for financial accounting | New Zealand / United States / EU | Standard Contractual Clauses (SCCs) / Xero DPA |
| Brevo | Email delivery for Opportify's own account and marketing communications | Contact details (email address, name) and communication preferences of Opportify's own account holders and newsletter subscribers. Does not include data submitted by customers for analysis. | European Union (EU) | EU-based processing / Brevo DPA |
| GitHub | Source code management and CI/CD pipelines | Developer account information, code repository content, and deployment automation data | United States | Standard Contractual Clauses (SCCs) / GitHub DPA |
Stay Notified
Contact
For questions regarding this sub-processor list or our data processing practices, contact:
Email: legal@opportify.ai
Opportify, Inc.
2093 Philadelphia Pike, Unit 1183
Claymont, DE 19703
United States