Last updated: August 19th, 2026
Swan AI, Inc. engages the third parties below to deliver the Services. Sub-processors process personal data on Swan's instruction. Independent controllers determine their own purposes for data they have independently collected.
Transfers of personal data from the EEA, the UK or Switzerland to Swan are made under the EU Standard Contractual Clauses (Module 2) together with the UK International Data Transfer Addendum where UK personal data is in scope. Onward transfers from Swan to recipients in countries without an adequacy decision are made under the Standard Contractual Clauses (Module 3) and the UK Addendum, incorporated through each provider's data processing agreement. Transfers to recipients in the EEA, or in countries benefiting from an adequacy decision, require no additional mechanism.
| Provider | Legal entity | Purpose | Role | Location | Transfer mechanism |
|---|---|---|---|---|---|
| Anthropic | Anthropic, PBC | AI model inference | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| OpenAI | OpenAI, L.L.C. | AI model inference | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Google Cloud | Google LLC | AI model inference — Gemini via Vertex AI | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Fireworks AI | Fireworks.ai, Inc. | AI model inference | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Impala | Impala AI | AI model inference | Sub-processor | Israel | Adequacy (Israel) — none required |
| Perplexity | Perplexity AI, Inc. | AI model inference, search-augmented | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| LangSmith | LangChain, Inc. | Agent tracing and evaluation; receives prompt and completion content | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| AWS | Amazon Web Services, Inc. | Cloud hosting and infrastructure | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| PlanetScale | PlanetScale, Inc. | Managed database (MySQL) | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Coralogix | Coralogix Ltd. | Logging and monitoring | Sub-processor | Israel | Adequacy (Israel) — none required |
| Clerk | Clerk, Inc. | Authentication and user identity | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Inngest | Inngest | Background job orchestration; payloads may contain personal data | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Resend | Resend | Transactional and notification email | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Daytona | Daytona Platforms, Inc. | Isolated code-execution sandbox | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| PostHog | PostHog, Inc. | Product analytics | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Composio | Sampark Inc. | Integration gateway; holds and refreshes OAuth credentials and proxies calls to integrations the Customer enables | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Slack | Slack Technologies, LLC | Delivery of notifications to the Customer's Slack workspace | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Unipile | UNIPILE SAS | Holds credentials for the Customer's connected email and LinkedIn accounts and performs sending and reading on Swan's instruction | Sub-processor | France | Within EEA — none required |
| ScrapingBee | ScrapingBee SAS | Web page retrieval | Sub-processor | Ireland | Within EEA — none required |
| ScrapeOps | ScrapeOps Ltd | Web page retrieval | Sub-processor | Ireland | Within EEA — none required |
| SearchAPI.io | SearchApi, LLC | Search result retrieval | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Apify | Apify Technologies s.r.o. | Retrieval of public LinkedIn profile and post data, executed on Apify infrastructure and accounts | Sub-processor | Czech Republic | Within EEA — none required |
| Exa | Exa Labs Inc. | AI web search and research | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Linkup | Linkup Technologies SAS | AI web research | Sub-processor | France | Within EEA — none required |
| Gamma | Gamma Tech, Inc. | Presentation generation from Customer-supplied content | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Findymail | Peanuts SaaS Studio (SAS) | Email finding and verification | Sub-processor | France | Within EEA — none required |
| IP-API.com | Artia International S.R.L. | Visitor IP geolocation, used to enforce Customer-defined targeting preferences | Sub-processor | Romania | Within EEA — none required |
| Stripe | Stripe, Inc. | Subscription billing | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Lemon Squeezy | Sold Through Link, LLC | Subscription billing | Sub-processor | USA | SCCs (Module 3) + UK Addendum |
| Explorium | Explorium Ltd. | Company and prospect enrichment, including intent data sourced through Explorium's own providers | Independent controller | Israel | Adequacy (Israel) — none required |
| Coresignal | Deeptrace Inc. | B2B people and company data | Independent controller | USA | SCCs + UK Addendum |
| ContactOut | Contactout Limited | Contact email and phone lookup | Independent controller | Hong Kong | SCCs + UK Addendum |
| LeadMagic | Lead Magic Corporation | Email and phone enrichment | Independent controller | USA | SCCs + UK Addendum |
| Generect | Generect, Inc. | LinkedIn lead and prospect data | Independent controller | USA | SCCs + UK Addendum |
| PredictLeads | PredictLeads | Company signals and similar-company data | Independent controller | Slovenia | Within EEA — none required |
| RB2B | GetEmails, LLC (d/b/a Retention.com) | Website visitor deanonymisation | Independent controller | USA | SCCs + UK Addendum |
| 5x5 | 5X5 US, LLC | Website visitor deanonymisation | Independent controller | USA | SCCs + UK Addendum |
https://tally.so/embed/vG8gRd?alignLeft=1&transparentBackground=1&dynamicHeight=1
August 19th, 2026 — Initial published version of this page; supersedes the DPA previously distributed as a linked document. Schedule A expanded to name AI model inference providers, AI observability, and platform infrastructure not previously listed.