Updated: September 21, 2026
Subprocessors
TE Software Solutions LLC uses the following subprocessors to provide Coldfire CRM (Art. 28(2) GDPR, Annex 3 of the Data Processing Agreement). This page is the authoritative list; the Privacy Policy and the Data Processing Agreement refer to it.
Subprocessors
Format per entry: provider — seat or processing location — purpose — transfer mechanism.
- Hetzner Online GmbH — Germany — hosting of the application, databases, backups and our self-operated transcription service — no third-country transfer
- Amazon Web Services EMEA SARL (AWS S3) — EU (Frankfurt region) — encrypted storage of call recordings and uploaded files — no third-country transfer within the EU region; otherwise EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- Twilio Ireland Ltd. / Twilio Inc. — Ireland / USA — telephony infrastructure (phone numbers, call routing) when you use telephony provided by us — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- OpenAI Ireland Ltd. / OpenAI, L.L.C. — Ireland / USA — generation of AI call documentation from call transcripts; API data is not used to train models — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- Resend, Inc. — USA — delivery of transactional and notification emails — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- Vercel Inc. — USA / EU edge — hosting of this website (marketing pages, signup and checkout step); no CRM content — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- Google Ireland Ltd. — Ireland / USA — sign-in with Google and calendar sync, only when you connect a Google account — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- Microsoft Ireland Operations Ltd. — Ireland / USA — mailbox and calendar sync, only when you connect a Microsoft 365 account — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- Anthropic, PBC — USA — AI assistant behind the support chat on our website (classifies support requests and drafts answers for our team) — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
- Telegram FZ-LLC — United Arab Emirates — internal notification of our support team about new support-chat messages (message excerpt, name and email of the requester) — EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework
Transcription
Call recordings are transcribed by speech-recognition software that we operate ourselves on our infrastructure in Germany. No external speech-recognition provider is involved.
Payment Processing
Paddle.com Market Ltd. (United Kingdom) is our reseller and Merchant of Record: sells the subscription to you, processes payments, issues invoices and handles tax as an independent controller under its own privacy policy. Paddle is therefore not a processor of ours.
Changes
We inform customers at least 14 days in advance, by email to the owners and administrators of the workspace, before we add or replace a subprocessor. Within that period you may object to the change on reasonable data-protection grounds; the Data Processing Agreement sets out the details. Please send questions to privacy@coldfire-crm.com.
COLDFIRE