The following Sub-Processors are authorized to Process Customer Personal Data.
We will provide customers with written notice at least thirty (30) days in advance of authorizing a new Sub-Processor, as described in our Data Processing Addendum. Where a Sub-Processor is engaged by an Infrastructure Provider rather than directly by Aesthetix CRM, we provide notice promptly after receiving that provider’s notice to us. Customers may object to a new Sub-Processor within thirty (30) days of our notice.
Published: September 4, 2026. Version: 2026.09.1.
Core Infrastructure Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| HighLevel Inc. | Core CRM platform infrastructure and services | United States | Direct |
| Google Cloud Platform | Cloud hosting and data storage | United States | Via HighLevel |
| Amazon Web Services | Cloud hosting and data storage | United States | Via upstream Infrastructure Providers |
| Cloudflare Inc. | CDN, security, DNS, and performance services | United States | Via upstream Infrastructure Providers |
| DigitalOcean LLC | Cloud hosting and infrastructure | United States | Direct |
| Vercel Inc. | Application hosting and deployment | United States | Direct |
| Supabase Inc. | Database and backend services | United States | Direct |
Communication Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| Twilio Inc. | SMS, voice, and communication services | United States | Direct |
| Mailgun Technologies | Email delivery services | United States | Via HighLevel |
AI Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| OpenAI | AI-powered content and automation features | United States | Via HighLevel |
| BotPress | AI chatbot functionality | United States | Via HighLevel |
| RetellAI | Voice AI services | United States | Via HighLevel |
| Synthflow | AI provider services | United States | Via HighLevel |
Payment Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| Stripe Inc. | Payment processing | United States | Direct |
| Nuvei Technologies | Payment processing services | Canada/Global | Direct |
| Authorize.net | Payment processing services | United States | Direct |
Data Infrastructure Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| CorralData, Inc. | Data warehousing, analytics, and patient reactivation audience processing for Aesthetix Activate. Applies only to customers enrolled in Aesthetix Activate. | United States | Direct |
| Fivetran, Inc. | Data pipeline (ETL) services supporting Aesthetix Activate. Applies only to customers enrolled in Aesthetix Activate. | United States | Via CorralData |
Other Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| Zapier Inc. | Workflow automation and integrations | United States | Direct |
| Freshworks Inc. | Customer support services | United States | Direct |
| Gleap | Customer support services | United States | Direct |
| Nightly Data, Inc. DBA Rubie | Customer import data services | United States | Direct |
| Pendo.io | Product analytics | United States | Direct |
| ChartMogul | Subscription analytics | United States | Direct |
| HighLevel India Pvt. Ltd. | Support services provided under HighLevel’s access controls and security program | India | Via HighLevel |
| LeadConnector LLC | Communication services and support | United States | Via HighLevel |
Entities marked Via HighLevel, Via CorralData, or Via upstream Infrastructure Providers are engaged by those providers under our agreements with them and are listed here for transparency. Their appearance on this page reflects the provider’s disclosure and is not a new engagement by Aesthetix CRM.
