Skip to content

Our Sub-Processors

Shout.com and FreeOnlineSurveys (henceforth, ‘the site’) share certain information and data with several third-party apps and organizations to assist in delivering our service. You will find a list of those apps and the purposes for which data is shared with them, below:

Sub-processors for data processed on your behalf (i.e. your survey data and contacts)

Section titled “Sub-processors for data processed on your behalf (i.e. your survey data and contacts)”

All sub-processors have been vetted and have entered into a Data Processing Agreement with us to ensure compliance with GDPR.

Technical/Security Guarantees are in place for all providers.

The list below contains companies that either host or monitor our services, transport data, or send email invitations, responses and reports. As such the data categories below apply to each company.

  • Your Contact Lists (name, email, address, title, contact details)
  • Your Survey/Form responses you collect (also includes metadata such as time taken, referring domain, invitation tracking)
  • Personal interests or preferences (marketing preferences and publicly available social media profile information);
  • IT information (IP addresses, usage data, cookies data, location data, browser data);

Service-specific data In addition to the above each provider will have their own privacy policy detailing any additional data they collect which may be updated from time to time. Links to their separate policies can be found in our own privacy policy.

NamePurposeData LocationBasis
Leaseweb UKHosting infrastructureUKEEA/Adequacy
CloudflareNetwork security and delivery, object file storage, and encrypted database backupsUSA / GLOBALSCC
SentryInfrastructure monitoring and bug reportingUSASCC
MezmoMonitoring log data.USASCC
Twilio SendGridEmail infrastructure, inbound and outboundUSASCC
Postmark (AC PM, LLC)Email infrastructure, outboundUSASCC
Microsoft AzureEncrypted database backups and application log archiveUKEEA/Adequacy
UK Dedicated ServersHosting infrastructureUKEEA/Adequacy
KamateraHosting infrastructureEUEEA/Adequacy
OpenAI Ireland LtdAI inference (receives message and prompt content). Not used for trainingUSA/EUSCC
Fireworks AIAI inference (receives message and prompt content). Not used for trainingUSASCC
Nebius B.V. (Nebius Token Factory)AI inference (receives message and prompt content). Not used for trainingEU / GLOBALSCC
Pinecone Systems, Inc.Vector search indexing. Receives derived numeric vectors, never message contentUSASCC
Meta PlatformsWhatsApp Business messaging. Messenger and Instagram are connected with your own Meta account and are not covered by this listingUSA / GLOBALSCC / DPF

Legacy sub-processors no longer in use.

NamePurposeData LocationBasisEnd of use
Amazon Web ServicesBackup storage and user content deliveryEUEEA/AdequacyQ1 2026
ClouviderHosting infrastructureEUEEA/AdequacyQ1 2025
ProductLiftCommunity board (feature suggestion, voting, and forum.)EUEEA/AdequacyQ1 2026
HetznerHosting infrastructure for PDF servers.EUEEA/AdequacyQ1 2024

Updates to sub-processor lists will be made to these pages, please check back often if you wish to be updated.

Other sub-processors used for data we control.

Section titled “Other sub-processors used for data we control.”
NamePurpose
HelpscoutSupport tickets
BraintreePayment gateway: Supporting the processing of the financial data of subscriptions, invoices, and billing details.
ChargebeeBilling system: supporting the processing of the financial data of subscriptions, invoices, and billing details.
StripePayment gateway: Supporting the processing of the financial data of subscriptions, invoices, and billing details.
Lemon SqueezyPayment gateway: Supporting the processing of the financial data of subscriptions, invoices, and billing details.
WiseRecording and reporting on payments made by bank transfer.
XeroRecording and reporting on financial transactions.
GoogleWorkspace apps, Tag manager

When you signup to our website or use the survey editing tools we may use additional sub-processors to facilitate security and the user experience. These companies are NOT used to process your survey data, contacts etc. There are therefore outside the scope of any DPA but are included for completeness.

  • All sub-processors have appropriate Technical/Security Guarantees, Standard Contractual Clauses, and Organisational Guarantees if appropriate.
  • To learn more about what data we process see our privacy policy.