Sub-processors
This page lists every third party that may receive personal data we hold about you, the role each one plays, where they process the data, and the data-processing-agreement status with each. We update this list whenever a sub-processor changes; the version pin below identifies the current snapshot.
Core sub-processors
These services are used to operate com1 for every customer. Data flows here as part of normal service delivery.
| Name | Role | Country / region | DPA status | Last reviewed |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure: managed databases (RDS), file storage (S3), email delivery (SES), server provisioning (EC2) | Malaysia (ap-southeast-5) and Singapore (ap-southeast-1, SES only) | On file | 2026-05-04 |
| Paddle | Subscription billing and payment processing | United Kingdom and United States | On file | 2026-05-04 |
| Anthropic (Claude) | AI assistant conversation processing (only when AI features are enabled by team owner) | United States | On file | 2026-05-04 |
| Voyage AI | Text embeddings for semantic search (only when AI features are enabled by team owner) | United States | On file | 2026-05-04 |
| Sentry | Error tracking and crash reporting; payloads pass through a PII scrubber before transmission | United States | On file | 2026-05-04 |
| Cloudflare | DNS, DDoS protection, and content delivery | Global (edge network) | On file | 2026-05-04 |
| MyInvois (LHDN) | Submission of e-invoices to the Inland Revenue Board of Malaysia (only when you use the e-invoicing feature) | Malaysia | Not required (government service) | 2026-04-25 |
Optional integrations you connect
These services activate only if you connect them with your own credentials. com1 acts as a passthrough — your contract is with the provider, not with us.
| Name | Role | Country / region | DPA status | Last reviewed |
|---|---|---|---|---|
| Dropbox | Backup destination for database backups (only when you connect a Dropbox account) | United States | User-managed (your contract with the provider) | 2026-04-25 |
| AWS S3 (your own account) | Backup destination using your own AWS S3 bucket and credentials | User-controlled (depends on chosen AWS region) | User-managed (your contract with the provider) | 2026-04-25 |
| AWS IAM (your own account) | Server provisioning in your own AWS account using a role you grant via IAM AssumeRole | User-controlled (depends on chosen AWS region) | User-managed (your contract with the provider) | 2026-04-25 |
Sub-processor list version: 2026-05-04-v3