Sub-processor List
Dealtact (operated by Cyzag Ltd) · Last updated: February 2026
This page lists the third-party sub-processors that Dealtact uses to process customer data. This list is maintained in accordance with our Data Processing Agreement and GDPR transparency requirements.
Current Sub-processors
Infrastructure & Hosting
| Sub-processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Microsoft Azure | Cloud hosting, database, file storage | All Customer Data | UK (primary), EU (backup) | Microsoft DPA |
AI Processing
| Sub-processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Anthropic | AI coaching, content generation | Deal context, prompts, contact/company data shared with AI features | USA | Anthropic DPA |
| Microsoft (Azure OpenAI) | Text embeddings for semantic search | Notes, emails, deal data, knowledge items — converted to numerical vectors | USA/EU | Microsoft DPA |
Payment Processing
| Sub-processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Stripe | Subscription billing, payment processing | Billing name, email, payment method (card details handled by Stripe, not stored by us) | USA | Stripe DPA |
Email Services
| Sub-processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| SendGrid (Twilio) | Transactional email delivery, email sending features | Email addresses, email content | USA | Twilio DPA |
Authentication
| Sub-processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| OAuth authentication (optional) | Email address, name (if you choose Google sign-in) | USA | Google Cloud DPA |
Data Locations Summary
| Primary Processing | Backup/Redundancy |
|---|---|
| UK (Azure UK South) | EU (Azure West Europe) |
International Transfer Safeguards
For sub-processors located outside the UK/EEA (USA), we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreement (IDTA)
- Supplementary measures including encryption and access controls
Each sub-processor listed above has executed appropriate data protection agreements with us.
Sub-processor Change Notifications
We will update this page when we add or remove sub-processors.
To receive email notifications of changes:
- Email privacy@dealtact.ai with subject "Subscribe to sub-processor updates"
We provide at least 14 days' notice before engaging a new sub-processor.
Objecting to Sub-processors
If you have concerns about a sub-processor, contact us at privacy@dealtact.ai.
If we cannot address your concerns, you may terminate your subscription in accordance with our Terms of Service.
Questions
For questions about our sub-processors or data processing:
Email: privacy@dealtact.ai
Change Log
| Date | Change |
|---|---|
| February 2026 | Initial publication |