Sub-processor List
Current Sub-processors
Anthropic
Added July 2026
AI model inference — generates message text, reply drafts, scheduling suggestions, and lead classification via Claude models
Supabase
Added July 2026
Database, authentication, and file storage — stores all platform data including account info, employee configuration, and conversation logs
Stripe
Added July 2026
Payment processing — handles subscription billing, invoices, and payment method storage
Vercel
Added July 2026
Application hosting and edge network — serves the platform and processes all in-transit data
Upstash
Added August 2026
Rate limiting, duplicate-message suppression and short-term reply caching — stores short-lived counters keyed by caller IP address to throttle sign-in and inbound webhook abuse; stores provider message identifiers so a redelivered message is answered only once; and, for businesses using the public API directly, holds the virtual employee's reply for up to 24 hours so a timed-out retry collects the same answer instead of triggering a second run
Slack
Added September 2026
Messaging channel — when a customer connects Slack, inbound messages are received through the Events API and the virtual employee's replies are posted back with chat.postMessage, so conversation content passes through Slack
Resend
Added July 2026
Transactional email delivery — sends notifications, welcome emails, privacy request confirmations, and breach notifications
Meta (Facebook / Instagram)
Added July 2026
Messaging integration — when customers connect their Facebook Page or Instagram Business account, lead messages flow through Meta's API
Telegram
Added August 2026
Messaging channel — when a customer connects a Telegram channel, inbound and outbound messages are delivered through the Telegram Bot API
Twilio
Added August 2026
SMS channel — when a customer connects a Twilio number, inbound and outbound text messages are delivered through Twilio
Google (Gmail / Calendar)
Added July 2026
Email and calendar integration — when customers connect their Google Workspace, the platform reads/sends emails and manages calendar events on their behalf
Microsoft (Outlook)
Added July 2026
Email channel — when a customer connects an Outlook or Microsoft 365 mailbox over IMAP/SMTP, message content is read from and sent through Microsoft's mail servers
What “Transfer Mechanism” Means
Most of our sub-processors are based in the United States. Because the UK and US do not have an adequacy decision covering all transfers, we rely on Standard Contractual Clauses (SCCs) with the UK Addendum as the legal basis for transferring personal data outside the UK. Where a provider offers a processor DPA, it incorporates appropriate SCCs; where one does not, that provider’s transfer-mechanism label above says so.
Notification of Changes
We will notify all organisation owners by email at least 30 days before adding a new sub-processor or making a significant change to an existing one. The effective date will be stated in the notification. You have the right to object within that 30-day window.
Historical Changes
A record of sub-processor additions and removals is maintained for audit purposes. Enterprise customers may request this history by emailing privacy@norynsystem.com.
Noryn · Noryn System Ltd · Registered in England & Wales no. 17335896 · ICO Reg ZC199308
Registered office: 44 Bellbrigg Lonning, Cockermouth, CA13 9DA, United Kingdom · privacy@norynsystem.com