Sub-processors
Last updated: 6 November 2026.
This page lists the third parties Katalyz uses to process personal data contained in customer Content on the Katalyz platform, where Katalyz acts as processor for its customers under the Data Processing Agreement or a signed Subscription Agreement.
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, file storage (including meeting recordings), authentication (Amazon Cognito), transactional email (Amazon SES) | All Platform data | Paris, France (eu-west-3) | Within the EU |
| Crisp IM SAS | Customer support conversations and help center | Support conversations, including content or files shared by users | France | Within the EU |
| Sentry (Functional Software, Inc.) | Error monitoring | Technical data, user identifiers | EU | Within the EU |
| OpenAI Ireland Ltd / OpenAI, L.L.C. | AI features: content generation, summaries, scoring, recommendations | Content submitted to AI features | Ireland, USA | DPA signed 30 Dec 2024; EU Standard Contractual Clauses; no retention beyond the request, no model training |
| Nylas, Inc. | Email and calendar integration, meeting recording (Notetaker) | Emails, calendar events, meeting recordings and transcripts the user chooses to sync | USA | EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses |
| Signature API, Inc. | Electronic signature of documents in dealrooms | Documents sent for signature, signatories' names, email addresses and signature evidence | USA | EU Standard Contractual Clauses under SignatureAPI's Data Processing Addendum |
Services that are not sub-processors
- Email and calendar providers that Users connect (Google, Microsoft) and AI assistants that Users connect through the AI Connector (for example ChatGPT or Claude) are the Customer's or the User's own providers. They process data under the Customer's or the User's agreement with them, at the User's initiative.
- Tools Katalyz uses for its own purposes, as data controller (CRM, marketing, support, billing), are described in the Privacy Policy.
Changes to this list
Katalyz informs customers of any new sub-processor before it starts processing their data, by email to the account administrators and by updating this page. Customers may object within 10 calendar days of the notification, with an objective written justification, as set out in the Data Processing Agreement. To receive notifications at another address, write to privacy@katalyz.co.
