Sub-processors
These are the sub-processors HeyWilliam uses to process Client Personal Data under our Data Processing Addendum. We give clients at least 30 days’ notice by email before adding or replacing one.
| Sub-processor | What it does | Location of processing | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Website and application hosting (Cloudflare Pages and Workers), the application database (Cloudflare D1) and its backups, DNS and security | Database in the United States (Western North America); requests served from Cloudflare’s global network | UK Extension to the EU-US Data Privacy Framework, with the UK Addendum to the EU SCCs as a fallback |
| OpenAI OpCo, LLC | AI model processing of Prompts and Client Materials to produce Generated Output for the Will agent | United States | UK Addendum to the EU SCCs, in OpenAI’s Data Processing Addendum |
Gmail and Outlook are not our sub-processors. When you connect a mailbox, Google or Microsoft keeps providing that mailbox to you under your own agreement with them, and HeyWilliam reads and sends mail in it as an External Integration you control.