Grasp Subprocessors
Below is the current list of subprocessors that Grasp uses to provide the Services.
We keep this page updated — check back or contact us if you need confirmation for compliance reasons.
Quick Notes
- Grasp engages subprocessors under written agreements that require appropriate technical and organizational measures and restrict use of Personal Data.
- Last updated: 28th of November, 2025
Subprocessors
| Subprocessor | Purpose | Typical Data Processed | Location / Transfers |
|---|---|---|---|
| Render (render.com) | Hosting and infrastructure. | Application data, encrypted backups, logs (IP addresses). | Primary data centers in the United States; may transfer internationally. |
| Mailgun (mailgun.com) | Email delivery | Email addresses and contents | United States and other locations depending on Mailgun's infrastructure. |
| Auth0 (auth0.com) | Authentication and identity management (social logins, SSO). | Unique identifiers from identity providers, user profile attributes (name, avatar), authentication logs. | Auth0 operates globally; data may be processed in the United States and other jurisdictions. |
| OpenAI (openai.com) | Sentiment analysis and AI-generated summaries of feedback. | Free-text responses, topic metadata, limited context for analysis. | OpenAI processes data in multiple regions; transfers may include the United States. |
| Cloudflare (cloudflare.com) | File and asset storage. | Avatar images and static files, request logs, caching metadata. | Global edge network; transfers to multiple jurisdictions may occur. |
| Slack (slack.com) | Optional notification delivery when Customers configure Slack integrations for topic alerts. | Webhook payloads, topic metadata, optionally limited respondent info if configured by the Customer. | Slack processes data globally; transfers may include the United States. |
| Datadog (datadoghq.com) | Application performance monitoring, error tracking, and logging. | Application logs, performance metrics, error traces, IP addresses. | Datadog processes data globally; transfers may include the United States and European Union. |