Legal · subprocessors
Sub-processors
Yapii engages the third-party companies listed below to process Personal Data on behalf of its customers. Each sub-processor is bound by a written data processing agreement that imposes protections at least as strong as those in Yapii's DPA. This list is updated whenever a sub-processor is added or removed.
1 · Current sub-processors
Updated 2026-08-26The table below shows every third party that receives or processes Personal Data in connection with the Yapii platform. "Location" refers to the primary country where data is processed.
| Sub-processor | Category | Purpose | Location |
|---|---|---|---|
| Hostinger International Ltd. | Infrastructure | Production hosting, application database, and file storage on managed virtual private servers | Brazil (current server region) |
| Google LLC | Infrastructure | Off-site storage of periodic database backups (Google Drive) | United States |
| Stripe | Payments | Subscription billing, payment method tokenization, and invoice generation | United States |
| Twilio | Messaging | SMS and MMS delivery, two-way messaging, and voice carrier features | United States |
| Vapi | Voice AI | AI voice-call orchestration, transcription, speech synthesis, and call-recording storage. Vapi engages its own vetted sub-providers for transcription and voice synthesis (for example, Deepgram and ElevenLabs). | United States |
| Mailgun (Sinch) | Transactional and campaign email delivery, bounce handling, and unsubscribe processing | United States | |
| OpenAI | AI inference | Large-language-model inference powering AI features (Claire, summaries, drafts). Data is processed as a sub-processor; OpenAI does not use customer content to train models. | United States |
| OfoxAI (Nice Talk Pte. Ltd.) | AI inference | LLM routing and inference for AI features; requests may be routed to vetted third-party model providers | Singapore |
| Scrape.do (Packend, LLC) | Data enrichment | Retrieval of public listing and property-record data used for seller intelligence features | United States |
2 · Change notification
Yapii will give at least 14 days' advance notice before adding or replacing a sub-processor. Notice is delivered by updating this page and emailing the change-notification list. To subscribe, email trust@yapii.com.
Customers who have signed a DPA may object in good faith to a new sub-processor on data-protection grounds within 14 days of the notice. Yapii will work in good faith to resolve the objection; if it cannot, the customer's exclusive remedy is to terminate the affected portion of the Service with a pro-rated refund of prepaid, unused fees.
3 · International data transfers
Most sub-processors listed above are based in the United States; exceptions are shown in the Location column (production hosting is currently served from Brazil, and LLM routing is provided by a Singapore-based provider). Where transfers of EEA, UK, or Swiss Personal Data are involved, Yapii relies on the European Commission's Standard Contractual Clauses (Module Two or Module Three as applicable), together with the UK International Data Transfer Addendum and Swiss FDPIC adaptations where required.
4 · Questions
For questions about this sub-processor list, data processing activities, or to request a copy of a sub-processor DPA, contact trust@yapii.com or review the full Data Processing Agreement.
Change history
Meaningful updates to this document, most recent first. Minor copy edits and typo fixes aren't tracked here.
- 1 · Current sub-processors
Corrected the list to reflect the platform's actual providers and processing locations.
This document is provided as a plain-English template to help you understand how Yapii operates. It is not legal advice, and it is not a substitute for review by your own counsel. Please have your attorney review before relying on it for a binding obligation or compliance decision.
Questions? Email legal@yapii.com.