Sub-processor List
Sub-processor List
Version 3 — Effective October 5, 2026
This Sub-processor List identifies the third parties that Transpara LLC and Transpara International LLC (together, "Transpara") engage to Process Customer Personal Data on Transpara's behalf in connection with the Transpara Software and Support Services. This list is referenced from, and forms part of, the Transpara Data Processing Addendum (the "DPA"). Capitalized terms used but not defined here have the meanings given in the DPA, the MSA, or applicable Data Protection Laws.
Important Notes
- Customer-Selected AI Model Providers are not Transpara Sub-processors. If Customer configures the Transpara product to use a third-party AI Model (for example, Anthropic Claude, OpenAI, Google Gemini, or a Customer-hosted AI Model), that AI Model provider has a direct relationship with Customer, not with Transpara. The AI Model provider is not on this list because it is not Transpara's Sub-processor.
- Transpara does not host Customer operational data. The Software runs in the Customer Environment. Customer's operational data (industrial process data, dashboards, configurations, time-series data) stays in the Customer Environment under Customer's control. The Sub-processors below Process only the limited categories of Customer Personal Data described in Appendix 1 of the DPA — primarily administrative contacts, billing data, support ticket content, marketing engagement (for opted-in contacts), and incidental personal data within Transpara's internal communications and storage.
- Website visitor data is separate from Customer Personal Data. Two Sub-processors below (SiteGround and DocsBot AI) Process data about visitors to www.transpara.com rather than Customer Personal Data under the MSA/DPA. The categories of data and the rights of visitors are governed by Transpara's Privacy Policy at https://www.transpara.com/privacy-policy/.
- Updates. Transpara will provide notice of any addition or change to this list to the Notice Contact identified in the applicable Order Form, at least thirty (30) days before the new Sub-processor begins Processing Customer Personal Data, in accordance with DPA Section 6.3. Customer may object to a new Sub-processor on reasonable data-protection grounds within that thirty (30) day period.
Sub-processors
| Sub-processor | Service / Purpose | Location of Processing | Categories of Customer Personal Data Processed | Notes |
| HubSpot, Inc. | Customer relationship management (CRM), marketing automation, and support ticketing | United States | Name, business email, business phone, job title, account history, support ticket content, marketing engagement | Free tier (US data residency only); single platform used across multiple functions; subject to HubSpot's DPA and SCCs |
| Microsoft Corporation | Email (Microsoft 365 / Exchange Online), cloud storage (OneDrive, SharePoint), video conferencing and team collaboration (Microsoft Teams) | United States, European Union, and other regions per Microsoft's published data residency options | Account, contact, communications data, files and documents that may incidentally include Customer-related personal data, meeting participant identifiers and meeting content | Microsoft 365 covers multiple functions; subject to Microsoft's Online Services DPA |
| Help Scout PBC | Customer support ticketing and communications | United States | Support ticket content, including any Customer-transmitted contact data, descriptions, and attachments | Used alongside HubSpot for support; subject to Help Scout's DPA and SCCs |
| Xero Limited | Billing and accounting | Australia (primary) and other regions per Xero's data residency | Customer billing contact data, invoicing and payment-related data | Xero is headquartered in New Zealand and lists Australia as primary processing region; subject to Xero's DPA |
| SiteGround Hosting Ltd. (and Affiliates) | Public-facing website hosting for www.transpara.com (WordPress) | United States (or Customer-selected SiteGround region) | Website visitor data (cookies, IP, page views); not Customer Personal Data under the MSA/DPA | Governed by Transpara's Privacy Policy; subject to SiteGround's DPA |
| Adobe Inc. | Electronic signature (Adobe Acrobat Sign) for contract execution | United States | Contracting-party contact data (name, title, email); executed agreements | Used for execution of Order Forms, MSAs, NDAs, and similar agreements; subject to Adobe's DPA |
| Google LLC | Limited use of Google Drive for cloud storage; Google Analytics for website measurement | United States | Files that may incidentally include Customer-related contact data (limited use); website visitor measurement data | Limited use; primary storage is Microsoft 365 |
| UglyRobot, LLC (d/b/a DocsBot AI) | AI-powered chat assistant embedded on www.transpara.com; answers visitor questions about Transpara products by retrieving content from Transpara's indexed public website and documentation | United States (primary hosting: Vercel, Google Cloud); EU optional vector-database region (Weaviate, Frankfurt) | Website visitor data: IP address, browser metadata, chat-message content (including any personal information a visitor voluntarily types into the chat), session identifiers, timestamps; not Customer (licensee) Personal Data under the MSA/DPA | Acts as Transpara's processor for the chat widget. Routes chat content through DocsBot's onward sub-processors (notably OpenAI, LLC for LLM inference; Weaviate B.V. or Turbopuffer for vector storage). SOC 2 Type II audited; supports GDPR via SCCs / EU-U.S. Data Privacy Framework. DPA available on request from human@docsbot.ai. See https://docsbot.ai/legal/sub-processors for DocsBot's own onward sub-processor list. |
Contact
Questions about this Sub-processor List, requests for additional information regarding the Sub-processors above, or notices in connection with this list may be sent to legal@transpara.com.
Change History
Version 3 — October 5, 2026: terminology update only. "Customer-Selected Model" is now "Customer-Selected AI Model", and the product is referred to as "the Transpara product", matching the other documents in Version 2026.2 of the license stack. No Sub-processor was added, removed, or changed.
Version 2 — May 25, 2026: added UglyRobot, LLC (d/b/a DocsBot AI) as a Sub-processor for the AI chat assistant embedded on www.transpara.com. Added a new "Important Notes" bullet clarifying that website-visitor data Processed by SiteGround and DocsBot is governed by Transpara's Privacy Policy rather than the MSA/DPA.
Version 1 — May 21, 2026: initial published version covering HubSpot (CRM, marketing, support — Free tier, US), Microsoft Corporation (Microsoft 365 — email, cloud storage, Teams), Help Scout (support ticketing), Xero (billing), SiteGround (WordPress hosting), Adobe Inc. (Acrobat Sign for e-signature), and Google LLC (limited use of Google Drive and Google Analytics).