Subprocessors
Eleven companies process personal data for Shuttio. Four of them can receive records from your file or your migration; the other seven see account, billing, job, usage, help chat or website visit data only.
Last updated: 9 Nov 2026
The list
This is Annex III of the Data Processing Addendum. A vendor appears here only if the code calls it.
SubprocessorPurpose, data and location
VercelVercel Inc.Hosts the application: the site, sign-in and the screens of a migration.Data: Records pass through its functions while you review fields, look up a failed record or download an error report, and are not stored there. Request and function logs hold ids and counts, never records or credentials, and are kept for at most 3 days.Location: Cleveland, Ohio, United States (region cle1)Transfer mechanism: EU–US Data Privacy Framework (certified) and Standard Contractual Clauses in its DPA.Receives your records: yes, as described under Data
NeonNeon (Databricks, Inc.)Postgres database.Data: Account data, encrypted credentials, and per-migration bookkeeping: ledger of created ids, source-to-destination id map, failed-row receipts, mapping. Also an uploaded CSV while it is held, an Odoo import package or app queue while it is held (both encrypted), and the Fields step cache (encrypted, deleted within 48 hours).Location: AWS us-east-2, Ohio, United StatesTransfer mechanism: EU–US Data Privacy Framework (Databricks, certified) and Standard Contractual Clauses in its DPA.Receives your records: yes, as described under Data
AnthropicAnthropic PBCClaude guesses the type of each column in an uploaded CSV, and answers questions in the help chat.Data: From an uploaded CSV: each column's name, at most 3 sample values per column cut to 80 characters, and, for a column with 25 or fewer distinct values, how many there are. Those values are record values from your file. For the help chat: product documentation, the messages you type, and on a migration page a summary of counts and statuses with no record value. Nothing from a connected CRM's records. Anthropic does not train on API inputs and deletes them within 30 days.Location: United StatesTransfer mechanism: Standard Contractual Clauses in its DPA; Data Privacy Framework as stated on our privacy policy.Receives your records: only from an uploaded CSV: up to 3 sample values per column, 80 characters each. Never the records of a connected CRM.
Amazon Web ServicesAmazon Web Services, Inc.Hosts the server that runs migrations: the migration worker and the job queue (Inngest, run by us on that server).Data: Records pass through the worker while a migration runs and are not stored there. The job queue holds migration ids and the progress of each step, never credentials or records. Server logs hold ids and counts and are kept for at most 100 MB per service.Location: AWS us-east-2, Ohio, United StatesTransfer mechanism: EU–US Data Privacy Framework (certified) and Standard Contractual Clauses in its DPA.Receives your records: yes, as described under Data
ResendResendSends account emails and migration completion notices.Data: The recipient's email address and the text of the email: counts and status of a migration, no record values.Location: United StatesTransfer mechanism: Standard Contractual Clauses in its DPA; Data Privacy Framework as stated on our privacy policy.Receives your records: no
StripeStripe, Inc.Takes payment for a CRM migration into Clarify, Odoo, HubSpot, Pipedrive, Breakcold, Twenty, Capsule, HighLevel, ActiveCampaign, Zendesk Sell, Zendesk Support, HubSpot Service Hub, folk, Ashby, Lever, Greenhouse, ClickUp, Asana or Trello.Data: The billing details you enter at Stripe's checkout and the migration number. No CRM records.Location: United StatesTransfer mechanism: EU–US Data Privacy Framework (certified) and Standard Contractual Clauses in its DPA.Receives your records: no
GoogleGoogle LLCGoogle sign-in, if you choose it.Data: The sign-in request. Shuttio receives your Google account id, email address, name and picture. No CRM records.Location: United States and other Google locationsTransfer mechanism: EU–US Data Privacy Framework (certified) and Standard Contractual Clauses in its terms.Receives your records: no
PostHogPostHog Inc.Product analytics: which pages are visited and where a migration flow stops.Data: Page addresses, the referring site and campaign tags, the browser and country, and the steps of the flow (signed up, connected a system, started or paid for a migration) with the system names and price band. The account is identified by an internal user id, never by email. No CRM records, credentials, tokens or email bodies. No session recordings, no form input, no cookies.Location: Frankfurt, Germany (PostHog EU cloud)Transfer mechanism: Standard Contractual Clauses in its DPA. Data is stored in the EU; US-side support access falls under those clauses.Receives your records: no
IPinfoIPinfo.io (United States)Tells us which organisation owns the network a website visit comes from, and whether it is a cloud server.Data: The IP address of a website visit, sent once per page load. It returns the network owner's name, domain, network number and country. We do not keep the IP address.Location: United StatesTransfer mechanism: The IP address goes to a United States company. We have not yet confirmed which transfer mechanism its DPA provides. It receives no account data and no CRM records.Receives your records: no
TelegramTelegram FZ-LLC / Telegram Messenger Inc.Tells our team in a private chat when someone starts a help chat conversation or an answer fails.Data: The page the question was asked on, the first question (cut to 500 characters), the migration number if there is one, and the email address of a signed-in user ("guest" for a visitor). No CRM records, credentials or tokens, and not the rest of the conversation.Location: Telegram operates servers in several countries; the operator is based in Dubai, United Arab EmiratesTransfer mechanism: Telegram is not certified under the EU–US Data Privacy Framework. It receives only the help chat details listed under Data, sent to a private team chat; no CRM records.Receives your records: no
RB2BRetention.com, Inc. (RB2B)For visitors in the United States only, may match a visit to a business profile and work email address, so we can reach out to the person.Data: The page opened, the referring site, the IP address, the time and the browser; it returns a business profile and email address when it finds a match. No CRM records, credentials or account data; it does not run in the signed-in app or the admin area. Not loaded for visitors outside the United States.Location: United StatesTransfer mechanism: Applies to visitors in the United States only; no data from EU, EEA, UK or Swiss visitors is sent to it.Receives your records: no
Systems you connect are not on this list
HubSpot, Pipedrive, Affinity, Freshsales, ActiveCampaign, OnePageCRM, Zendesk Sell, Freshdesk, HubSpot Service Hub, BambooHR, Asana, Trello, ClickUp, Brevo, Toggl Track, Clockify, Greenhouse, Lever, Workable, Recruitee, SmartRecruiters, Teamtailor, Close, folk, Insightly, Bitrix24, Capsule, HighLevel, SugarCRM, SuiteCRM, Salesflare, Vtiger, Twenty, WooCommerce, Attio, Clarify, Odoo, Breakcold, Zendesk Support and Ashby are the systems you connect, under your own agreements with them. We read from your source and write to the destination you authorise.
How we announce a change
We email account holders at least 30 days before a new subprocessor receives personal data, and update this page and its date on the day the notice goes out. If you object on reasonable data protection grounds within those 30 days, write to help@shuttio.com. We then either do not use the new subprocessor for your data, or you may end your use of Shuttio and we delete your data as set out in the DPA (section 6).