This page details who our sub-processors are and how we handle international transfers of personal data.
Last updated: 2 November 2026
Sub-processors
We act as a processor on behalf of our customers when processing:
user account data
support ticket data
personal data included in digital assets.
We use a select number of sub-processors to support the delivery of our services.
Each sub-processor has been assessed for its ability to provide appropriately secure services and has entered into a data processing agreement with us.
Our current sub-processors are listed below. The tables detail the services provided to us buy the sub-processors, the customer data processed, and the safeguards we rely on when data leaves the UK or the European Economic Area (EEA).
Sub-processor | What it does for Dash | Where customer data is processed | Transfer safeguard |
Amazon Web Services EMEA SARL | Infrastructure, file storage and processing for our hosted products, including AI features through Amazon Bedrock For more information about our hosting and security practices, please see our Security Overview page | EU (AWS EU regions) | Not needed for EU hosting. Any access from the USA: UK-US data bridge and EU-US Data Privacy Framework |
Auth0, LLC (an Okta company) | Authentication and user management | EU and USA | UK-US data bridge and EU-US Data Privacy Framework; EU Standard Contractual Clauses with the UK Addendum |
Blitline LLC | Image processing | EU (storage); USA (company location) | EU Standard Contractual Clauses with the UK Addendum |
Brightcove Inc. | Video encoding | USA | UK-US data bridge and EU-US Data Privacy Framework |
ConvertAPI, UAB (Lithuania) | Document conversion | EU | N/A |
Datadog, Inc. | Application logging and monitoring | EU (storage); USA (company location) | UK-US data bridge and EU-US Data Privacy Framework; EU Standard Contractual Clauses with the UK Addendum |
Google Cloud EMEA Limited and Google LLC (Google Workspace) | Email and administrative support applications | EU and USA | UK-US data bridge and EU-US Data Privacy Framework |
Carry Technologies, Inc. dba Hightouch | Syncing data between systems | EU (Ireland) | Not needed for EU hosting. Any access from the USA: UK-US data bridge and EU-US Data Privacy Framework |
HubSpot, Inc. | Sending notifications to users and supporting service provision | EU and USA | UK-US data bridge and EU-US Data Privacy Framework; EU Standard Contractual Clauses with the UK Addendum |
Intercom, Inc. | Customer support platform | EU and USA | UK-US data bridge and EU-US Data Privacy Framework; EU Standard Contractual Clauses with the UK Addendum |
Mezmo, Inc. | Application logging | USA | UK-US data bridge and EU-US Data Privacy Framework; EU Standard Contractual Clauses with the UK Addendum |
Microsoft Corporation (Microsoft Entra ID) | Cloud services, including geolocation services | USA | UK-US data bridge and EU-US Data Privacy Framework |
The following sub-processors are opt-in. Their services are not core components of the Dash service and they will only process a customer's data if that customer chooses to enable the feature they support.
Sub-processor | What it does for Dash | Where customer data is processed | Transfer safeguard |
Santa Cruz Software Company | Provides LinkrUI, for Adobe and Microsoft integration. Enabled by signing up to use LinkrUI with Dash | USA | EU Standard Contractual Clauses with the UK Addendum or the UK IDTA |
cloudHQ LLC | Cloud data migration. Enabled when you migrate your existing assets to Dash. cloudHQ does not store the data | USA | EU Standard Contractual Clauses with the UK Addendum or the UK IDTA |
International data transfers
Some of the sub-processors listed above are located in, or can access customer data from, countries outside the UK and the EEA, mainly the United States. The tables above show where each sub-processor processes customer data and the safeguards we rely on with respect to international transfers.
Depending on where the recipient is, we rely on:
Adequacy: transfers to countries that the UK or the EU recognise as providing adequate protection. This includes transfers between the UK and the EEA, and transfers made under the EU-US Data Privacy Framework and the UK-US data bridge to US providers certified under those schemes.
Standard contractual clauses: for other transfers, the EU Standard Contractual Clauses with the UK Addendum, or the UK International Data Transfer Agreement, supported by a transfer risk assessment.
With respect to international transfers between us and you, our terms and conditions incorporate special personal data transfer clauses that apply where such clauses are restricted under UK or EU law. See https://www.dash.app/personal-data-transfer-clauses.
Integrations you connect yourself
Some features let you connect Dash to an account you hold with another provider. When you link the accounts, data is shared with that provider on your instruction and under your own terms with them. These providers are not Dash sub-processors.
Service providers that process our data
We also use service providers for Dash’s own business purposes, such as billing and payments, analytics, marketing and customer success. This is not customer data processed on your behalf, so these providers are not listed here. They are however described in our Privacy Policy, available at https://www.dash.app/privacy-policy.
Changes to this page
This page will be kept up to date with any changes to our sub-processors.
You can sign up to receive email notifications about proposed changes by emailing help@dash.app or by starting a conversation with us using the chat button on this page.
A record of recent changes is set out below.
Date | Change |
2 November 2026 | Page restructured. Providers that do not process customer data on Dash’s behalf no longer referenced on this page. |
Contact us
If you have any questions about personal data, then please contact privacy@dash.app