Legal
Subprocessors List
Last modified: June 15, 2026
GTMx ("we," "us," or "our") uses certain third-party service providers ("subprocessors") to help deliver our platform and services. This page identifies the subprocessors we engage and describes their role and location.
We only engage subprocessors that provide sufficient guarantees about their security measures and data processing practices. Where required, we enter into appropriate data processing agreements with each subprocessor.
If you have questions about our subprocessors, please contact us at legal@gtmx.ai.
Jump to section
1. Core Infrastructure & Platform Subprocessors
These subprocessors apply to all customers who utilize the GTMx platform and are agnostic of specific product utilization.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| Base44 (Wix) | Application Hosting, Database, Authentication, File Storage | USA / EU |
| Amazon Web Services (AWS) | Cloud Infrastructure, Object Storage (S3), CDN | USA |
| Deno Deploy | Backend Functions / Serverless Runtime | USA / Global |
| Cloudflare | CDN, DDoS Protection, DNS | USA / Global |
| GitHub (Microsoft) | Source Control, CI/CD, 2-way Code Sync | USA |
2. AI & Language Model Subprocessors
These subprocessors provide the AI and large language model capabilities that power GTMx's AEO analytics, content generation, copilot, and intelligence features.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| OpenAI | LLM — GPT-4o, GPT-4o-mini, GPT-4.1, Content Generation, Embeddings | USA |
| Anthropic | LLM — Claude Sonnet 4, Claude Opus 4, Analysis, Reasoning & Content Writing | USA |
| Google (Gemini / Vertex AI) | LLM — Gemini 2.5 Pro, Gemini 2.5 Flash, Web-augmented Search | USA |
3. Analytics & Observability Subprocessors
These subprocessors are used for platform monitoring, error tracking, performance analytics, and usage instrumentation.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| Google Analytics (Google) | Web Analytics | USA |
| Apollo.io | Visitor Intelligence, Website Traffic Tracking | USA |
4. Communication & Email Subprocessors
These subprocessors handle transactional and marketing communications sent through or on behalf of the GTMx platform.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| Resend | Transactional Email Delivery | USA |
| Google (Gmail / Workspace) | Internal Email, Calendar, Team Communications | USA |
5. Content & Media Subprocessors
These subprocessors support content creation, media hosting, and asset delivery within the GTMx platform.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| Unsplash | Stock Photography Provider | Canada / USA |
| YouTube (Google) | Video Hosting, Embeds | USA |
| Google Fonts | Web Font Delivery | USA |
6. Customer Relationship & Support Subprocessors
These subprocessors may be utilized when customers interact with GTMx sales, support, or account management personnel.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| HubSpot | Customer Relationship Management (CRM) | USA |
| Notion | Internal Knowledge Management, Documentation | USA |
| Linear | Product & Issue Tracking | USA |
| Loom | Async Video Communication | USA |
7. Payments & Billing Subprocessors
These subprocessors handle payment processing, billing, and subscription management for GTMx customers.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| Stripe | Payment Processing, Subscription Billing, Invoicing | USA / Ireland |
8. Authentication & Security Subprocessors
These subprocessors support identity verification, access management, and platform security.
| Subprocessor | Type / Purpose | Location |
|---|---|---|
| Base44 Auth (Wix) | User Authentication, Session Management, OTP | USA / EU |
| Google OAuth (Google) | Social Authentication | USA |
| Microsoft (Azure AD) | Social Authentication, Microsoft OAuth | USA / EU |
| Cloudflare | WAF, Bot Protection, TLS/SSL | USA / Global |
This list may be updated from time to time as we add, remove, or replace subprocessors. We will provide reasonable advance notice of material changes to our subprocessors where required by applicable data protection law or our contractual obligations.