Google Cloud Platform (Google LLC)
- Purpose
- Production hosting (GKE, Cloud SQL, Memorystore, Cloud Storage) and monitoring
- Data processed
- All customer data
- Processing location
- us-central1 (Iowa, US)
- Agreement
- Google Cloud Data Processing Addendum
Back to Trust Center
Subprocessors
Last updated: September 22, 2026
The following providers support Pine services. Each is covered by a data-processing agreement and assessed under our vendor management policy.
We announce new or replacement subprocessors on this page at least 30 days in advance and notify contractual customers by email.
Subprocessors
Amazon Web Services, Inc.
- Purpose
- Transactional email (SES)
- Data processed
- Email addresses
- Processing location
- us-east-1 / us-west-2 (US)
- Agreement
- AWS Data Processing Addendum
Stripe
- Purpose
- Pine subscription payments and billing
- Data processed
- Payment and billing information
- Processing location
- US and other locations under Stripe’s DPA
- Agreement
- Stripe Data Processing Agreement
Cloudflare, Inc.
- Purpose
- DNS, CDN, TLS termination, WAF and DDoS protection
- Data processed
- Request metadata, IP addresses
- Processing location
- Global edge (US entity)
- Agreement
- Cloudflare DPA
Google LLC (Gemini API)
- Purpose
- LLM and audio-processing APIs for the AI agent, including evaluation of recorded calls
- Data processed
- Conversation content and call audio sent for inference
- Processing location
- US
- Agreement
- Google Cloud DPA
Google Workspace (Google LLC)
- Purpose
- Corporate email, documents and identity (SSO)
- Data processed
- Business contact data, support correspondence
- Processing location
- US/EU
- Agreement
- Google Workspace DPA
Vero (Getvero Pty Ltd)
- Purpose
- Push-notification delivery
- Data processed
- Device tokens, notification content
- Processing location
- AU/US
- Agreement
- Vero DPA
RudderStack, Inc.
- Purpose
- Customer-data pipeline: event collection and routing to analytics and marketing tools
- Data processed
- Pseudonymous usage events, device identifiers, hashed contact identifiers
- Processing location
- US
- Agreement
- RudderStack DPA
PostHog, Inc.
- Purpose
- Product analytics
- Data processed
- Pseudonymous usage events
- Processing location
- US
- Agreement
- PostHog DPA
AppsFlyer Ltd.
- Purpose
- Mobile attribution and marketing analytics
- Data processed
- Device identifiers (IDFA/GAID), install events, app events
- Processing location
- US/EU (Israel entity)
- Agreement
- AppsFlyer DPA
Twilio Inc.
- Purpose
- Telephony and voice for the AI calling agent
- Data processed
- Phone numbers, call audio in transit
- Processing location
- US
- Agreement
- Twilio DPA
Contact us
Read about our security measures and how to report a vulnerability.
Security and vulnerability disclosure
Security questions and vulnerability reports
security@19pine.aiPrivacy questions and data rights requests
privacy@19pine.aiProduct and account support
support@19pine.ai