List of Authorized Sub-processors
Effective Date: August 6, 2026
Pursuant to the Data Processing Addendum (DPA) between NOETIKOS LTD (operating under the trade name "SMSBAT", UK Company Reg. No. 17154674) and our Clients (Data Controllers), this document sets forth the current list of third-party sub-processors engaged by SMSBAT to process Customer Personal Data in connection with the provision of SMSBAT messaging services, APIs, and platform infrastructure.
Notice of Sub-processor Changes (DPA Section 5)
SMSBAT maintains an updated list of sub-processors and notifies Clients of any intended changes or additions to this list at least 30 calendar days prior to authorizing any new sub-processor to process Customer Personal Data. Clients may subscribe to updates by contacting privacy@smsbat.com.
1. Infrastructure & Hosting Sub-processors
| Sub-processor | Activity / Service | Data Location |
|---|---|---|
| Hetzner Online GmbH | Core cloud hosting, server infrastructure, databases & application backend | Німеччина (ЄС) / Germany (EU) |
| Cloudflare, Inc. | Web Application Firewall (WAF), CDN, edge routing & DDoS mitigation | Глобальна мережа / Global (EU/US) |
| Amazon Web Services (AWS EMEA SARL) | Cloud backup storage, media assets & attachment processing | Люксембург (ЄС) / Luxembourg (EU) |
2. Communications & Messaging Channel Partners
| Sub-processor | Activity / Service | Data Location |
|---|---|---|
| Viber Media S.à r.l. (Rakuten Viber) | Processing and final delivery of Viber Business Messages, Viber OTP & Viber Chatbots | Люксембург (ЄС) / Luxembourg (EU) |
| Meta Platforms Ireland Ltd. | WhatsApp Business API (Cloud API), Instagram Direct & Facebook Messenger message routing | Ірландія (ЄС) / Ireland (EU) / US |
| Оператори мобільного зв'язку та SMS-агрегатори (Licensed Telecom Carriers) | Final-mile SMS termination and Flash Call routing to subscriber mobile handsets globally | Recipient destination country |
3. Analytics, Mobile Push & AI Services
| Sub-processor | Activity / Service | Data Location |
|---|---|---|
| Google Ireland Limited | Firebase Cloud Messaging (FCM) for SMSBAT Mobile App alerts & Google Analytics | Ірландія (ЄС) / Ireland (EU) |
| OpenAI, LLC | Generative AI language processing (engaged only if Client explicitly enables n8n AI Agent features) | США (Data Privacy Framework) / USA |
Data Protection Safeguards
SMSBAT enters into written data processing agreements with each sub-processor, imposing data protection terms requiring them to protect Customer Personal Data to a standard no less protective than provided under SMSBAT's DPA and GDPR Article 28 requirements. International data transfers outside the EEA/UK are safeguarded using Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.
Questions or Objections
If you have questions or wish to object to a new sub-processor in accordance with your DPA, please direct your inquiry to our Data Protection Officer at: privacy@smsbat.com