NEVTAN ENGAGE
Last Updated: June 5, 2026
NevTan Engage uses carefully selected third-party service providers (“Subprocessors”) to assist in delivering our Services. This page identifies Subprocessors that may process Customer personal data on behalf of Engage. It forms part of the Engage Data Processing Agreement at engage.nevtan.com/legal/dpa.
A Subprocessor is a third-party provider engaged by Engage that accesses or processes Customer personal data in the course of delivering the Services. Providers that process only Engage's own operational data (e.g., website analytics) are not listed here but are referenced in our Cookie Policy.
Before engaging a Subprocessor, Engage assesses security controls and certifications, privacy compliance posture, data residency and transfer mechanisms, business continuity, and contractual willingness to accept data processing obligations equivalent to those Engage provides to Customers.
In accordance with the Engage DPA, Engage provides at least 30 days' advance notice before adding or replacing a Subprocessor, via email to Account Owners and publication on this page. Customers have a 14-day window to object on reasonable data protection grounds by emailing privacy@engage.nevtan.com with subject “Subprocessor Objection — [Provider Name]”. To receive change notifications, enable them in Settings → Privacy → Subprocessor Notifications.
| Provider / Legal Entity | Purpose | Data Processed | Location(s) | DPA |
|---|---|---|---|---|
| Infrastructure and Hosting | ||||
Amazon Web Services Amazon Web Services, Inc. (USA) | Cloud compute, storage, databases, and managed services | Customer account data, contact lists, campaign data, backups | Global (regions selectable per plan) | Yes |
Cloudflare Cloudflare, Inc. (USA) | CDN, DDoS protection, web application firewall, bot management | IP addresses, HTTP request metadata, security logs | Global edge (no Customer contact data stored) | Yes |
| Email Delivery | ||||
Resend Resend Inc. (USA) | Transactional and marketing email delivery (primary) | Recipient email addresses, message content, delivery metadata | United States | Yes |
Amazon SES Amazon Web Services, Inc. (USA) | Email delivery infrastructure (secondary / overflow) | Recipient email addresses, message metadata, delivery status | United States | Yes |
| SMS and Messaging | ||||
Telnyx Telnyx LLC (USA) | SMS message delivery (primary carrier) | Phone numbers, message content, delivery status, opt-out records | United States | Yes |
Twilio Twilio Inc. (USA) | SMS message delivery (fallback carrier) | Phone numbers, message content, delivery status | United States | Yes |
| WhatsApp Messaging | ||||
Meta Platforms Meta Platforms, Inc. (USA) | WhatsApp Business API. Applies only where WhatsApp channel is enabled. | Recipient phone numbers, message content, delivery status | United States / Global (Meta network) | Yes — Meta API Terms |
| Payments and Billing | ||||
Stripe Stripe, Inc. (USA) | Subscription billing, payment processing, invoice management | Billing name, address, payment transaction metadata | United States | Yes |
| Artificial Intelligence Services | ||||
OpenAI OpenAI, LLC (USA) | AI content generation features. Zero data retention API tier. | User prompts submitted to AI features, campaign content fragments | United States | Yes — OpenAI DPA |
Anthropic Anthropic, PBC (USA) | AI assistance and recommendations. No-training API commitments. | User prompts submitted to AI features, campaign content | United States | Yes — Anthropic DPA |
| Monitoring, Observability, and Security | ||||
Sentry Functional Software, Inc. dba Sentry (USA) | Application error monitoring and crash reporting | Error logs, stack traces, session context (PII scrubbing configured) | United States | Yes |
Datadog Datadog, Inc. (USA) | Infrastructure monitoring, APM, log management, security observability | System metrics, application logs, infrastructure telemetry | United States | Yes |
| Customer Support | ||||
Intercom Intercom R&D Unlimited Company (Ireland) | In-app customer support chat, help centre, automated support workflows | Account owner name, email, account identifiers, support conversations | United States / EU | Yes |
| Product Analytics (Internal — Authorized Users Only) | ||||
PostHog PostHog, Inc. (USA) | Product usage analytics for platform improvement. Tracks Authorized User actions within the Engage dashboard, not Customer contact data. | Authorized User actions, feature usage events, session metadata | United States | Yes |
Notes
All Subprocessors are contractually required to:
Most Subprocessors operate infrastructure in the United States. Where Customer personal data is transferred from jurisdictions with transfer restrictions, Engage relies on EU Standard Contractual Clauses (Modules 2 and 3), the UK IDTA addendum, adequacy decisions, and binding contractual protections. See Section 8 of the Engage DPA and Section 8 of the Privacy Policy for full details.
Privacy Officer
Email: privacy@nevtan.com
Security Team
Email: security@nevtan.com
