This list is maintained in accordance with Addi’s Privacy Policy and customer Data Processing Agreements. Changes are posted at least 14 days before taking effect. Customers with an executed DPA may object to a new sub-processor within 10 days of the posted change date by contacting support@addi.ai.

Last updated: October 2026

Current Sub-Processors

Sub-Processor	Category	Processing Purpose	Data Processed	Location
ActiveCampaign	CRM / Email	Customer lifecycle email marketing and contact management	Customer PII (name, email, engagement data)	USA
Black Forest Labs (Flux)	AI / Image	AI image generation for advertising creatives	Brand and business context data (no direct customer PII)	USA
Cerebras API	AI / LLM	LLM inference for AI-powered platform capabilities	Internal prompts; may include brand and business data	USA
Cerebrium	GPU Compute	Serverless GPU processing for invisible watermarking of ad creatives	AI-generated video and audio assets (no customer PII)	USA
Clay	Data Enrichment	Prospect list enrichment for Addi’s own business-to-business outbound marketing	Prospect business contact data (name, work email, title, company)	USA
Cloudflare Turnstile	Bot Protection	Bot detection at platform entry points	Visitor IP address, browser signals	Global
CookieYes	Consent Mgmt	GDPR and CCPA cookie consent management on addi.ai	Visitor consent preferences, minimal browser data	EU
DigitalOcean	Cloud Infra	Primary cloud hosting for all production workloads	Customer PII, usage data, auth tokens	USA
ElevenLabs	AI / Audio	Text-to-speech and voice cloning for audio ad creatives	Script text; customer-provided voice samples and cloned voices	USA
Framer	Website Hosting	Hosting for the addi.ai marketing website	Hashed visitor IP address and user agent (no cookies)	Netherlands / USA
Google Ads	Advertising	Search and display ad campaigns for customers	Ad creatives, targeting, budgets, performance data	USA / Global
Google Cloud (Vertex AI, Gemini)	AI / Video	AI video and music generation, and translation, for advertising creatives	Brand and business context data (no direct customer PII)	USA
Google Workspace	Productivity	Email, document, and calendar platform for business operations	Customer PII (email addresses, names in communications)	USA / EU
HubSpot	CRM	Customer relationship management for Addi’s own sales and marketing	Prospect and lead business contact data (name, work email, phone, title, company)	USA
Instantly	Email Outreach	Addi’s own business-to-business outbound email	Prospect business contact data (name, work email, title)	USA
KIE.ai	AI / Video	AI video and image generation for advertising creatives	Brand and business context data (no direct customer PII)	USA
Langfuse	LLM Observability	LLM call tracing and prompt management	Internal data; potential customer context data passed through SDK	EU
MadHive	Advertising / DSP	Connected TV, display and online video campaigns for customers	Ad creatives, targeting, pseudonymous audience IDs, performance data	USA
Mailgun	Transactional Email	Delivery of transactional emails (signup, notifications, password reset)	Customer PII (email address, name)	USA / EU
Meta	Advertising	Facebook and Instagram ad campaigns for customers	Ad creatives, targeting, budgets, ad account IDs, performance data	USA / Global
Mux	Video Hosting	Hosting and streaming of ad creative previews	Ad creative assets, viewer IP address	USA
Neo4j (AuraDB)	Database	Graph database for brand similarity and benchmarking	Brand, industry and product relationships (no PII)	USA
OpenAI	AI / LLM	LLM API for text generation, brand profiling, and ad script creation	Internal prompts; may include brand and business data	USA
OpenRouter	AI / LLM	LLM request routing to Cerebras	Internal prompts; may include brand and business data	USA
Perplexity AI	AI / LLM	Standby fallback LLM provider	Internal prompts; may include brand and business data	USA
PostHog	Product Analytics	Pseudonymous product analytics and masked session recordings, cookieless, IP-disabled	Pseudonymous user ID, event metadata, masked session recordings (no contact data)	USA
Railway	Cloud Infra	Cloud hosting for Addi-Studio workloads	Customer PII, usage data, auth tokens (Addi-Studio platform)	USA
RunPod	GPU Compute	Serverless GPU processing for invisible watermarking of ad creatives	AI-generated video and audio assets (no customer PII)	USA
Runway ML	AI / Video	AI video generation for advertising creatives	Internal prompts; may include brand and business data	USA
Sentry	Error Monitoring	Application error monitoring for Addi-Studio (PII scrubbing configured)	Error payloads and stack traces	USA
Shopify API	Business Data	Retrieves merchant order and product data for campaign measurement	Merchant OAuth credentials (encrypted), order and product data, pseudonymous customer IDs (no contact data)	USA / Canada
Shotstack	Video Rendering	Video rendering and editing for advertising creatives	Ad creative assets and render instructions	Australia / USA
Slack	Internal Comms	Internal team notifications, including new account alerts	Customer PII (new user name and email)	USA
Spotify	Advertising / Audio	Audio and podcast ad campaigns for customers	Audio ad creatives, targeting, budgets, performance data	USA / Global
Square API	Business Data	Retrieves merchant transaction and product data for ad creative and campaign measurement	Merchant OAuth credentials (encrypted), product catalog, order data, pseudonymous customer IDs (no contact data)	USA
Stripe	Payment Processing	Payment processing for Addi customer billing	Customer PII (name, email, billing address, payment tokens)	USA
TikTok	Advertising	TikTok ad campaigns for customers	Ad creatives, targeting, budgets, account IDs, performance data	USA / Global
Topaz Labs	AI / Image	AI image and video upscaling for advertising creatives	AI-generated image and video assets (no customer PII)	USA
WorkOS	Auth / Identity	SSO and enterprise identity management	Customer PII (email, org ID, auth tokens)	USA

Change Log

Changes are posted here at least 14 days before the new sub-processor begins processing personal data.

Entries from July through October 2026 were posted on October 29, 2026.

Date	Change	Sub-Processors	Notes
October 2026	Added	Instantly, Framer, KIE.ai, OpenRouter, Perplexity AI, Google Ads, Meta, Spotify, Neo4j, Topaz Labs, Slack, TikTok, HubSpot, Clay	Added following a review of AI providers, advertising platforms and business tools. HubSpot and Clay support Addi’s own sales and outbound marketing and receive no customer data from the Addi platform. ElevenLabs updated for voice cloning. Google Gemini / Veo renamed Google Cloud. PostHog updated to include masked session recordings.
September 2026	Added	MadHive, Shopify API	Added to support Connected TV, display and online video campaigns, and Shopify sales data.
August 2026	Added	Mux	Added to host and stream ad creative previews.
July 2026	Added	Shotstack	Added to support video rendering and editing for advertising creatives.
June 2026	Added — Vica acquisition	Black Forest Labs (Flux), Google Gemini / Veo, Railway, Runway ML, Sentry	Added following acquisition of Vica. These sub-processors support the Addi-Studio platform.
April 2026	Added	Cerebrium	Added to support serverless GPU processing for invisible watermarking of ad creatives.
March 2026	Initial list	ActiveCampaign, Cerebras API, Cloudflare Turnstile, CookieYes, DigitalOcean, ElevenLabs, Google Workspace, Langfuse, Mailgun, OpenAI, PostHog, RunPod, Square API, Stripe, WorkOS	Initial sub-processor list published.

Questions? Contact support@addi.ai. To request our Data Processing Agreement, email the same address.