Subprocessor List

These sub-processors are used to process and store data for all applications and services.                                                    
        

Entity Name  Entity Type
Service Type Country
Amazon Web Services, Inc.  Corporation Hosting, critical infrastructure USA
Google Cloud   Corporation Cloud storage, translation, analytics   USA
HubSpot Inc.  Corporation CRM USA
Acuity Scheduling  Corporation Calendar Bookings    USA
Zoom Video Communications Corporation 1-1 Coaching      USA
Gifted.co            Corporation Gift Card Distribution          USA
Iterable Inc.  Corporation Marketing automation and email engagement    USA
Mixpanel Inc.  Corporation Product analytics and user behavior tracking      USA
Awardco  Corporation Gift Card Distribution    USA
Auth0 Inc Corporation Authentication (2FA security protections)    USA
Twilio Inc Corporation Communications Platform (OTP SMS)    USA
Microsoft Entra ID Corporation Authentication, SSO, identity management  USA
Okta, Inc.  Corporation SSO, authentication, identity management      USA
Zscaler, Inc Corporation Security, DLP, secure access  USA
Atlassian / Jira  Corporation Support, ticketing, workflow management  USA
GitHub, Inc.  Corporation Source code, CI/CD, development workflows USA
Portkey, Inc  Corporation AI gateway, routing, guardrails, and operational monitoring USA
OpenAI OpCo, LLC Corporation AI model inference for approved product features USA
Stripe Corporation Payment processing and secure management of online transactions.  USA
Chargebee Corporation Subscription management, recurring billing, and invoicing. USA
Branch Corporation Deep linking, referral tracking, and mobile app attribution. USA

 



 

Identity Providers

Certain identity providers, such as Okta or Microsoft Entra ID, may be used by Wellness Coach for authentication and access management or by customers as customer-selected SSO identity providers. Where such providers process customer Personal Information on behalf of Wellness Coach in connection with the Services, they are treated as subprocessors. Where they are used solely as a customer-selected identity provider, they remain the customer’s provider.