Data Processors
Infrastructure subprocessors
| Name | Description of Processing | Certificates (Selected) | Location (Data Centers) | Website | Key Source(s) | Date Added |
| Amazon Web Services (AWS) | Primary hosting and cloud infrastructure | ISO 9001; ISO/IEC 27001; ISO/IEC 27017; ISO/IEC 27018 (PII); ISO/IEC 27701; ISO/IEC 22301; ISO/IEC 20000‑1; SOC 1; SOC 2; SOC 3; CSA STAR | United States (us‑east‑1), Germany (eu‑central‑1), Australia (ap‑southeast‑2) | aws.amazon.com | aws.amazon.com/compliance/programs/ | 7/31/2018 |
| Bunny.net | Content Delivery Network (CDN) / Edge hosting | ISO/IEC 27001 | United States, Europe, Australia (70+ global PoPs) | bunny.net | bunny.net/privacy/ | 6/27/2023 |
Service specific subprocessors
| Name | Description of Processing | Certificates (Selected) | Location (Data Centers) | Website | Key Source(s) | Date Added |
| Anthropic |
Technical Support Knowledge Base, Data Anonymization Not used within the Action1 Platform |
SOC 2, ISO 27001, ISO 42001, CSA Star, FedRamp High | United States | anthropic.com | trust.anthropic.com | 7/17/2026 |
| Base | Customer Engagement | SOC2 Type II; ISO/IEC 27001; GDPR; CCPA; CSA STAR | United States | base.ai | base.ai/platform/security-and-privacy | 06/15/2026 |
| Datadog | SIEM Processing | SOC2 Type II; ISO/IEC 27001; ISO/IEC 27701; GDPR; CCPA; CSA STAR; FedRAMP; TISAX | United States | datadog.com | trust.datadoghq.com/ | 06/15/2026 |
| DocuSign | Electronic signature and agreement management | ISO/IEC 27001; ISO/IEC 27017; ISO/IEC 27018; SOC 1; SOC 2; SOC 3; PCI-DSS v4.0; CSA STAR Level 2 | United States (primary) + EU replicas | docusign.com | docusign.com/trust/compliance | 11/13/2018 |
| Earth Class Mail | Virtual mail scanning & postal mail management | SOC 2 Type II | United States – Beaverton (OR) & Frisco (TX); data stored in AWS US | earthclassmail.com | legalzoom.com/security | 12/2/2017 |
| FastSpring | Customer payment processing (merchant of record) | PCI-DSS Level 1; SOC 2 Type II; SOC 3 | United States (AWS US-East) + EU backup region | fastspring.com | trust.fastspring.com/ | 11/17/2020 |
| Flowroute (a BCM One Company) | US-only call metadata and CDRs | CCPA and GDPR Compliant | United States (us-east) | flowroute.com | https://flowroute.com/legal/privacy-policy/ | 2/18/2026 |
| Google Cloud (GCP) | Cloud host for telecommunication system | ISO/IEC 27001; ISO/IEC 27017; SOC 2; CIS; NIST 800-53; PCI-DSS; CSA STAR Level 2 | United States (us-east1) | google.com | https://www.action1.com/legal/data-processors/ | 2/18/2026 |
| HubSpot | Email marketing automation & CRM | ISO/IEC 27001; SOC 2 Type II; SOC 3; CSA STAR Level 1 | United States (us-east-1) or Germany (eu-central-1) by customer choice | hubspot.com | legal.hubspot.com/security | 6/28/2022 |
| Intuit QuickBooks Online | Accounting & bookkeeping SaaS | ISO/IEC 27001; SOC 2; PCI-DSS Level 1 | United States (AWS-hosted) | quickbooks.intuit.com | security.intuit.com | 11/30/2017 |
| Onfido (Entrust) | Identity verification (KYC/AML) | ISO/IEC 27001; ISO/IEC 27701; SOC 2 Type II; ETSI EN 319 401; iBeta PAD Level 1-2 | Ireland, United States (Ohio), Canada (Quebec) | onfido.com | www.entrust.com/legal-compliance | 5/28/2025 |
| OpenAI |
Technical Support Knowledge Base, Data Anonymization Not used within the Action1 Platform |
SOC 2, ISO 27001, ISO 27701, ISO 27017, ISO 42001, CSA Star, FedRamp 20x | United States (Primary) | openai.com | trust.openai.com | 7/17/2026 |
| Outreach | Marketing Pipeline and Deal Management | SOC2 Type II; ISO/IEC 27001; ISO 42001; GDPR; CSA STAR | United States and Ireland | outreach.ai | outreach.ai/platform/trust | 06/15/2026 |
| Salesforce | CRM & customer support platform | ISO/IEC 27001; ISO/IEC 27017; ISO/IEC 27018; ISO 22301; SOC 1; SOC 2; SOC 3; PCI-DSS Level 1; CSA STAR Level 2; FedRAMP Moderate | United States, Germany (Frankfurt), France (Paris), Japan (Tokyo), Australia (Sydney) – Hyperforce global cloud | salesforce.com | trust.salesforce.com/en/compliance/ | 3/22/2018 |
| Twilio | EU, UK, and International Call Metadata and CDRs | ISO/IEC 27001; ISO/IEC 27017; SOC 2; PCI-DSS | United States (US1); Ireland (IE1); Australia (AU1) | twilio.com | https://security.twilio.com/ | 2/18/2026 |