Subprocessors
Published 2026-10-07
Selma Intelligence AB (“Selma”) is a data processor and engages certain sub-processors that may process personal data submitted by our customers in their capacity as data controllers. These sub-processors are listed below, with a description of the services and where, geographically, the data is hosted.
Third party Sub-processors
| Sub-processor | Location | Nature / purpose of the processing | Legal basis for GDPR restricted transfers |
|---|---|---|---|
| Microsoft Ireland Operations Ltd. (Microsoft Azure) | EU | Cloud infrastructure hosting and data processing for the Selma platform. | N/A – transfer within EU/EEA |
| OpenAI, LLC | USA | Direct OpenAI API used by the Research engine and selected AI features as a complement to Azure OpenAI. Receives prospect/company data and prompt content. API data is not used to train OpenAI models (zero-retention where configured). | Standard Contractual Clauses (SCCs) |
| MailReach | France (EU) | Email deliverability monitoring of customer mailboxes. Receives sender/recipient metadata. | N/A – transfer within EU/EEA |
| Astrodon Inc | USA | Lifecycle, onboarding, hand-over and team-invitation transactional emails sent by the Selma platform to Selma's own customers and end-users. Processes recipient name and email address. | Standard Contractual Clauses (SCCs) |
| SmartBear Software | USA | Application error reporting, exception tracking and crash diagnostics across the API, Functions and Outreach Functions services. Stack traces may incidentally contain user identifiers. | Standard Contractual Clauses (SCCs) |
| Kleer AB | Sweden | Integrated accounting and financial system used to synchronize ledger data and automate bookkeeping workflows. | N/A – transfer within EU/EEA |
| HubSpot Inc | USA (EU Data Center) | Used as CRM and marketing automation platform to manage customer relationships, track interactions, and send onboarding or product-related communication. | Standard Contractual Clauses (SCCs) |
| Salesforge Ou | Estonia | Domain registration and hosting of the dedicated outreach mailboxes that Selma provisions for customers. Processes mailbox owner name, email address and signature, domain registrant contact details, and the content of emails sent and received through those mailboxes. Mailbox warm-up, deliverability and inbox-placement testing for customer outreach mailboxes. Processes mailbox owner name, email address and signature, mailbox access credentials, and the content of test emails. | N/A – transfer within EU/EEA |
Microsoft Ireland Operations Ltd. (Microsoft Azure)
EU
Cloud infrastructure hosting and data processing for the Selma platform.
N/A – transfer within EU/EEA
OpenAI, LLC
USA
Direct OpenAI API used by the Research engine and selected AI features as a complement to Azure OpenAI. Receives prospect/company data and prompt content. API data is not used to train OpenAI models (zero-retention where configured).
Standard Contractual Clauses (SCCs)
MailReach
France (EU)
Email deliverability monitoring of customer mailboxes. Receives sender/recipient metadata.
N/A – transfer within EU/EEA
Astrodon Inc
USA
Lifecycle, onboarding, hand-over and team-invitation transactional emails sent by the Selma platform to Selma's own customers and end-users. Processes recipient name and email address.
Standard Contractual Clauses (SCCs)
SmartBear Software
USA
Application error reporting, exception tracking and crash diagnostics across the API, Functions and Outreach Functions services. Stack traces may incidentally contain user identifiers.
Standard Contractual Clauses (SCCs)
Kleer AB
Sweden
Integrated accounting and financial system used to synchronize ledger data and automate bookkeeping workflows.
N/A – transfer within EU/EEA
HubSpot Inc
USA (EU Data Center)
Used as CRM and marketing automation platform to manage customer relationships, track interactions, and send onboarding or product-related communication.
Standard Contractual Clauses (SCCs)
Salesforge Ou
Estonia
Domain registration and hosting of the dedicated outreach mailboxes that Selma provisions for customers. Processes mailbox owner name, email address and signature, domain registrant contact details, and the content of emails sent and received through those mailboxes. Mailbox warm-up, deliverability and inbox-placement testing for customer outreach mailboxes. Processes mailbox owner name, email address and signature, mailbox access credentials, and the content of test emails.
N/A – transfer within EU/EEA