Sub-Processor List
GDPR Requires Heads Up to communicate all data sub-processors
Heads Up may engage and use certain third-party data processors (“Sub-Processors”) to provide services to our customers. These Sub-Processors may have access to personal data provided directly by Heads Up or our clients (“Customer Data”) in order to perform the contracted services or enable requested features related thereto. This page provides important information about the identity, location, and role of each Sub-Processor.
We currently use the below list of Sub-Processors to provide infrastructure services, customer support, service administration services, marketing services, and email notifications. Please note that not all Sub-Processors are used in the provision of all services we provide, and some may only be involved in assisting with the provision of specific services.
Annex I: Subprocessor Table
|
Subprocessor |
Services Provided |
What user information is shared or collected |
Entity Location |
|
Airia LLC |
We integrate with Airia’s platform to process and execute inputs submitted by users of the Services. |
Users may provide inputs that they voluntarily submit, which may include health and wellness information and photos or videos. |
United States |
|
Anthropic |
Providing AI models and tools to provide output to user prompts. |
Users may provide inputs that they voluntarily submit, which may include health and wellness information and photos or videos. |
*United States |
|
Appsflyer Ltd. |
Marketing outreach and invite management platform. |
Users may send invitations to non-users to join the Services. |
Israel |
|
Atlassian, Inc. (Jira & Confluence) |
Support, project, and tracking-related services. |
Users may submit support inquiries relating to the Services. |
United States |
|
Microsoft Corporation (Azure, Office365) |
Azure serves as Our managed cloud platform where services are hosted. Office365 is used for general office operations. |
Users may provide inputs that they voluntarily submit, which may include health and wellness information and photos or videos. |
*Global |
|
Cloudflare, Inc. |
Content delivery network and DDoS protection |
Admin credentials, IP address, browser information, operating system details, and other-related meta data. |
*United States |
|
OpenAI |
Providing AI models and tools to provide output to user prompts. |
Users may provide inputs that they voluntarily submit, which may include health and wellness information and photos or videos. |
*United States |
|
Posthog Inc |
We utilize Posthog for metric capture. |
User data analytics. |
United States |
|
Salesforce, Inc. |
Customer relationship management and administrative account-related services |
User account credentials. Business account information, Users may submit support inquiries relating to the Services. |
United States |
|
Functional Software, Inc. (Sentry) |
Sentry serves as the Services application monitoring and error tracking platform. |
User data analytics. |
United States |
|
Stripe, Inc. |
Payment processing for transactions |
Log-in credentials and payment information. |
United States |
|
Amazon AWS |
Cloud Hosting |
Web Application and Databases |
*United States |
|
Segment |
Event Data Processing |
Event Data Transmission |
United States |
|
GoDaddy |
Domain Hosting |
Website |
United States |
|
Meta |
Marketing |
Email Addresses |
United States |
|
|
Marketing |
Email Addresses |
United States |
|
Google Ads /G Analytics / Youtube |
Marketing |
Email Addresses |
*United States |
|
X |
Marketing |
Email Addresses |
United States |
*Hosting and/or location of Subprocessor, including the services and products provided, may be dependent on customer location.
If you have questions, please reach out to us at support@headsuphealth.com.
Company
Copyright © 2026 HeadsUp Health LLC. All Rights Reserved.
