Subprocessors
List of Subprocessors
DM HERO sp. z o.o., ul. Twarda 18, 00-105 Warszawa
Last updated: 4 November 2026
DM HERO sp. z o.o. uses the entities listed below to provide the DM Hero service. For the personal data we process on behalf of our customers, they are our sub-processors within the meaning of Art. 28 GDPR.
None of the entities listed uses our customers' data to train artificial intelligence models.
| Entity | Purpose of processing | Location | Transfer mechanism | Trains on data |
|---|---|---|---|---|
| Railway Corporation | Hosting of the application, the API and the website | EU (Netherlands) | SCC | No |
| Supabase Pte. Ltd. | Database, user sign-in, file storage | EU (Ireland) | SCC | No |
| Cloudflare, Inc. | Delivery and protection of the service, storage of encrypted backups | USA / global | DPF, SCC | No |
| GitHub, Inc. | Automated creation of encrypted backups | USA | DPF | No |
| Anthropic Ireland, Limited | AI language models (replies, suggestions, analyses) | USA | SCC | No |
| Eleven Labs Inc. | Transcription of voice messages into text | USA | DPF, SCC | No |
| Functional Software, Inc. (Sentry) | Application error monitoring | EU (Germany) | DPF, SCC | No |
| RocketOne OÜ (RocketAPI) | Publicly available data from Instagram profiles | EU (Germany, Estonia) | Within the EEA; traffic through the Cloudflare network: DPF | No |
| Apify Technologies s.r.o. | Publicly available data from Instagram, and search | EU / USA | SCC | No |
| Stripe Payments Europe, Ltd. | Payments and billing (data of DM Hero's own customers, not data entrusted to us) | Ireland / USA | DPF, SCC | No |
| Google Ireland Limited | Company email and calendar (Google Workspace) | EU / USA | DPF, SCC | No |
| Calendly LLC | Scheduling demo calls | USA | DPF | No |
Data transfer mechanisms
DPF: EU-U.S. Data Privacy Framework, a decision of the European Commission finding an adequate level of protection for data transferred to certified organisations in the USA.
SCC: Standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914).
Within the EEA: Data is not transferred outside the European Economic Area.
Integrations and separate controllers
Integrations that you connect yourself (for example HubSpot, GoHighLevel, Slack, Google Calendar, your own Calendly, your own webhooks and tools that use the API) are not our processors. Data reaches them on your instruction, on terms agreed between you and the provider of that service.
Meta Platforms Ireland Limited (Instagram), and Stripe in respect of its own legal obligations, act as separate controllers.
Changes to this list
We inform our customers at least 14 days in advance of any planned addition or replacement of an entity that processes our customers' data. During that time a customer may raise a reasoned objection, in accordance with the Terms of Service.
Contact
Please send any questions about this list to contact@dmhero.ai.