Sub-processors
Last updated: 01/10/2026
This page identifies where the Certin platform is hosted and the sub-processors Certin Technologies Limited engages to deliver it, together with each provider’s role, the categories of data concerned and the place of processing.
It is referred to from our Privacy Policy and our Terms of Use. No content is sent to a provider that is not named here.
1. Platform hosting
| Item | Position |
|---|---|
| Hosting provider | Google Cloud Platform |
| Region | European Union |
| Protection measures | Encryption in transit and at rest, access control and logging, and segregation of environments |
| Access to customer systems | Read-only, within the scope authorised by the customer’s IT department, through named individual credentials |
- Item
- Hosting provider
- Position
- Google Cloud Platform
- Item
- Region
- Position
- European Union
- Item
- Protection measures
- Position
- Encryption in transit and at rest, access control and logging, and segregation of environments
- Item
- Access to customer systems
- Position
- Read-only, within the scope authorised by the customer’s IT department, through named individual credentials
2. Sub-processors
- Required means the service is necessary to deliver the platform.
- Failover means the provider carries traffic only where the primary provider in the same category is unavailable.
- Optional means the service is deployed only where the customer elects to enable the corresponding feature.
| Provider | Service | Status | Data touched | Processing location |
|---|---|---|---|---|
| Google Cloud Platform | Platform hosting, database, cache, and file and document storage | Required | All platform data, including uploaded files and documents | European Union |
| Amazon Web Services (SES) | Transactional email | Required | Recipient addresses, email content | United States (us-east-1) |
| Resend | Transactional and notification email | Required | Recipient addresses, notification content | United States |
| Brevo | Email sending | Failover | Recipient addresses, notification content | European Union |
| SendGrid | Email sending | Failover | Recipient addresses, email content | United States |
| Mailgun | Email sending | Failover | Recipient addresses, email content | United States |
| OpenAI | Language model and embeddings, primary | Required | Prompts, document embeddings and tool results, which may include customer operational data | United States |
| Google (Gemini) | Language model | Failover | Prompts and tool results, which may include customer operational data | United States |
| Groq | Language model | Failover | Prompts and tool results, which may include customer operational data | United States |
| Valhalla / OSRM | Routing | Required | Route and shipment coordinates | European Union |
| HERE / TomTom | Routing | Failover | Route and shipment coordinates | European Union |
| Open-Meteo | Weather and geocoding | Required | Location coordinates | European Union |
| Google OAuth2 | Federated login | Optional | Identity and profile data at login | Global, identity endpoints anchored in the United States |
| OpenAI (realtime) with Twilio | Voice agent | Optional | Call audio, telephone numbers, shipment and operational context | United States |
| Twilio | SMS and WhatsApp messaging | Optional | Telephone numbers, message content | United States |
| IMAP mailbox providers | Mailbox ingestion for coordination channels | Optional | Full content of the mailboxes designated by the customer | Inherited from the customer’s mailbox provider |
- Provider
- Google Cloud Platform
- Service
- Platform hosting, database, cache, and file and document storage
- Status
- Required
- Data touched
- All platform data, including uploaded files and documents
- Processing location
- European Union
- Provider
- Amazon Web Services (SES)
- Service
- Transactional email
- Status
- Required
- Data touched
- Recipient addresses, email content
- Processing location
- United States (us-east-1)
- Provider
- Resend
- Service
- Transactional and notification email
- Status
- Required
- Data touched
- Recipient addresses, notification content
- Processing location
- United States
- Provider
- Brevo
- Service
- Email sending
- Status
- Failover
- Data touched
- Recipient addresses, notification content
- Processing location
- European Union
- Provider
- SendGrid
- Service
- Email sending
- Status
- Failover
- Data touched
- Recipient addresses, email content
- Processing location
- United States
- Provider
- Mailgun
- Service
- Email sending
- Status
- Failover
- Data touched
- Recipient addresses, email content
- Processing location
- United States
- Provider
- OpenAI
- Service
- Language model and embeddings, primary
- Status
- Required
- Data touched
- Prompts, document embeddings and tool results, which may include customer operational data
- Processing location
- United States
- Provider
- Google (Gemini)
- Service
- Language model
- Status
- Failover
- Data touched
- Prompts and tool results, which may include customer operational data
- Processing location
- United States
- Provider
- Groq
- Service
- Language model
- Status
- Failover
- Data touched
- Prompts and tool results, which may include customer operational data
- Processing location
- United States
- Provider
- Valhalla / OSRM
- Service
- Routing
- Status
- Required
- Data touched
- Route and shipment coordinates
- Processing location
- European Union
- Provider
- HERE / TomTom
- Service
- Routing
- Status
- Failover
- Data touched
- Route and shipment coordinates
- Processing location
- European Union
- Provider
- Open-Meteo
- Service
- Weather and geocoding
- Status
- Required
- Data touched
- Location coordinates
- Processing location
- European Union
- Provider
- Google OAuth2
- Service
- Federated login
- Status
- Optional
- Data touched
- Identity and profile data at login
- Processing location
- Global, identity endpoints anchored in the United States
- Provider
- OpenAI (realtime) with Twilio
- Service
- Voice agent
- Status
- Optional
- Data touched
- Call audio, telephone numbers, shipment and operational context
- Processing location
- United States
- Provider
- Twilio
- Service
- SMS and WhatsApp messaging
- Status
- Optional
- Data touched
- Telephone numbers, message content
- Processing location
- United States
- Provider
- IMAP mailbox providers
- Service
- Mailbox ingestion for coordination channels
- Status
- Optional
- Data touched
- Full content of the mailboxes designated by the customer
- Processing location
- Inherited from the customer’s mailbox provider
3. How this list is maintained
- Substitution between providers listed above within the same service category, including failover, may take place without further notice. Certin maintains a record of which providers have carried each customer’s data, available to that customer on request.
- Engaging a provider that is not listed above, or a change in the country in which a listed provider processes data, is reflected on this page before it takes effect, and is subject to any prior consent required under a customer’s agreement with us.
- Where a customer elects to enable an optional service, that election constitutes approval of the corresponding provider.
- Where an optional service involves telephone numbers, call audio or mailbox content, the applicable personal data formalities are addressed with the customer before that service is enabled.
- Customers can ask to be told when this list changes by writing to privacy@getcertin.ai.
4. Contact
Certin Technologies Limited, 205 Regent Street, London, W1B 4HB, United Kingdom. Email privacy@getcertin.ai.