Sub-Processors
Last Updated: March 21, 2026
Opportify, Inc., a Delaware corporation ("Opportify"), engages the following third-party sub-processors to assist in delivering its services. All sub-processors are bound by contractual obligations that require them to protect personal data to a standard consistent with Opportify's Privacy Policy and applicable data protection law, including the GDPR where applicable.
Where required under applicable data protection law (including GDPR Article 28), Opportify will notify customers of any intended additions or replacements to this list with reasonable advance notice. Customers who have executed a Data Processing Addendum (DPA) with Opportify may object to new sub-processor additions in accordance with the terms of that DPA.
Current Sub-Processors
| Sub-Processor | Role | Data Processed | Processing Location | Transfer Mechanism |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and hosting | All data processed by the Opportify platform (account data, API request/response data, fraud telemetry, billing records) | United States | Standard Contractual Clauses (SCCs) / AWS DPA |
| Stripe | Payment processing and billing | Billing information, payment method details, transaction history, name, and billing address | United States / EU | Standard Contractual Clauses (SCCs) / Stripe DPA |
| Xero | Accounting and financial record management | Customer name, billing address, invoice records, and transaction data required for financial accounting | New Zealand / United States / EU | Standard Contractual Clauses (SCCs) / Xero DPA |
| ActiveCampaign | Email marketing and customer communications | Email address, name, marketing interaction data, and communication preferences of subscribed contacts | United States | Standard Contractual Clauses (SCCs) / ActiveCampaign DPA |
| GitHub | Source code management and CI/CD pipelines | Developer account information, code repository content, and deployment automation data | United States | Standard Contractual Clauses (SCCs) / GitHub DPA |
| BetterStack | Observability, uptime monitoring, and log management | Application logs, error events, and infrastructure metrics (may incidentally include request metadata) | European Union (EU) | EU-based processing / BetterStack DPA |
| CookieYes | Cookie consent management | Visitor cookie consent records and preference data | Ireland (EU) | EU-based processing / CookieYes DPA |
Stay Notified
Contact
For questions regarding this sub-processor list or our data processing practices, contact:
Email: legal@opportify.ai
Opportify, Inc.
2093 Philadelphia Pike, Unit 1183
Claymont, DE 19703
United States