Sub-processors
Last updated on: 15 July 2026
Crisp is based in France and makes use of the following sub-Processors:
| Sub-Processor | Category | Purpose | Location of the Company | Location where Customer Data is held |
|---|---|---|---|---|
| DigitalOcean, LLC | Hosting | Main servers & data (i.e. Most data) | US | EU (NL + DE) |
| Vultr Holdings Corporation | Hosting | Email relay servers | US | No data held |
| Amazon Web Services, Inc. | Hosting | Encrypted backups storage | US | EU (IE) |
| Cloudflare, Inc. | Network | DNS, CDN & DDoS protection | US | No data held |
| Stripe Payments Europe, Ltd. | Payment | Credit-card processing | EU (IE) | US |
| PayPal (Europe) S.à r.l. & Cie, S.C.A. | Payment | Payment processing | EU (LU) | No data held |
| Google LLC (Firebase Cloud Messaging) | API Provider | Push notifications delivery This processing is optional and performed only when the Customer enables push notifications. |
US | No data held |
| Microsoft Corporation (Microsoft Azure) | API Provider | On-demand translation of messages and AI-powered message processing This processing is optional and performed only when the Customer enables these features. |
US | No data held |
| Scaleway | Hosting | Infrastructure hosting | EU (FR) | EU (FR) |
| Crisp's AI features run on Crisp's own in-house AI infrastructure, hosted in the EU (Scaleway), and by default no Customer Data is sent to any external LLM provider. The third-party LLM providers listed below are entirely optional: they are disabled by default and used only when explicitly enabled by the Customer. When enabled, Customer Data may be transmitted to these sub-processors | ||||
| OpenAI | API Provider | AI-powered message processing (natural language understanding and response generation) This processing is optional and performed only upon documented instruction and activation by the Customer. |
US | Data is processed transiently for the sole purpose of generating responses and is not retained |
| Gemini | API Provider | AI-powered message processing (natural language understanding and response generation) This processing is optional and performed only upon documented instruction and activation by the Customer. |
US | Data is processed transiently for the sole purpose of generating responses and is not retained |
| Anthropic | API Provider | AI-powered message processing (natural language understanding and response generation) This processing is optional and performed only upon documented instruction and activation by the Customer. |
US | Data is processed transiently for the sole purpose of generating responses and is not retained |
| Mistral | API Provider | AI-powered message processing (natural language understanding and response generation) This processing is optional and performed only upon documented instruction and activation by the Customer. |
EU | Data is processed transiently for the sole purpose of generating responses and is not retained |
Any transfer of personal data is carried out in accordance with Chapter V of the GDPR and Standard Contractual Clauses where applicable.
We update this list when we onboard or replace a sub-processor. Material changes are communicated to customers as required under our Terms of Use and Data Processing Agreement.
For questions about this list, contact dpo@crisp.chat. See also our Privacy Statement and Security Practices documentation.
