How we use sub-processors
Anthony Oliva engages the third parties below to help deliver the platform. Each one processes customer personal data only on our documented instructions, under a written contract with data protection obligations no less protective than those in our Data Processing Addendum.
We carry out security and privacy due diligence before engaging any sub-processor and review each engagement annually. We remain fully liable to our customers for the acts and omissions of our sub-processors.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure, compute, storage, and database hosting | All platform data | United States |
| Cloudflare, Inc. | DNS, content delivery, TLS termination, and denial-of-service protection | Request metadata, IP addresses | United States |
| Stripe, Inc. | Payment processing and invoicing | Billing contact and payment details | United States |
| Twilio Inc. (SendGrid) | Transactional email for account, billing, and support notifications | Account contact email addresses | United States |
| Atlassian Corporation | Support ticketing and internal issue tracking | Support correspondence | United States |
| Datadog, Inc. | Application performance monitoring and log aggregation | Technical logs, request metadata | United States |
Connectivity partners and registries
The parties below are involved in carrying and registering messaging traffic. Consistent with industry practice and our Data Processing Addendum, telecommunications providers are not sub-processors: they act as independent controllers of the traffic data they handle in order to route, terminate, and register messages. We list them here for transparency.
| Party | Purpose | Data received |
|---|---|---|
| Direct connect aggregators and connectivity partners | Delivering messages into carrier networks | Sending number, destination number, message content, metadata |
| AT&T, T-Mobile, Verizon, and other mobile network operators | Terminating messages to the recipient handset | Sending number, destination number, message content |
| Campaign Registry, Inc. | A2P 10DLC brand and campaign registration | Brand identity and campaign details |
| Carrier vetting partners | Brand verification and special use case vetting | Brand identity details |
Message content and recipient numbers are never provided to these parties for any purpose beyond delivering and registering the traffic.
Notification of changes
We give at least 30 days’ notice before adding or replacing an infrastructure sub-processor, and at least 10 days’ notice for any other sub-processor.
To receive these notices, email privacy@anthonyoliva.com with the subject line “Subscribe: sub-processor notifications” and the email address you want notices sent to. Account administrators of paid accounts are subscribed automatically.
If you object to a new sub-processor on reasonable data protection grounds within the notice period, contact us and we will work with you in good faith. If we cannot resolve the objection, you may terminate the affected services without penalty, as described in the Data Processing Addendum.
How to reach us
Questions about this document can be sent tolegal@anthonyoliva.com. Privacy requests go toprivacy@anthonyoliva.com. Abuse reports go toabuse@anthonyoliva.com or through ourabuse reporting form.
ANTHONY OLIVA, INC.
6724 Thompson Road, Syracuse, NY 13211, United States
+1 (332) 231-6423
support@anthonyoliva.com