‍

Sub-processor List

Last Updated: December 1, 2025

Overview

This page lists the third-party sub-processors that Oli Labs, Inc. ("Oli Labs," "we," or "us") uses to process customer data in connection with our Services. We engage these sub-processors to help us provide, maintain, and improve the Oli platform.

This list applies to customers who have entered into our Data Processing Addendum as part of their subscription to Oli.

What is a Sub-processor?

A sub-processor is a third-party service provider that we engage to process personal data on behalf of our customers. We carefully select sub-processors based on their security practices, privacy commitments, and ability to meet applicable data protection requirements.

Our Commitments

When engaging sub-processors, Oli Labs:

• ✓ Conducts due diligence to ensure they meet our security and privacy standards
• ✓ Enters into written agreements that include data protection obligations at least as protective as those in our DPA
• ✓ Maintains appropriate oversight of sub-processor activities
• ✓ Provides customers with at least 30 days' advance notice of new or replacement sub-processors
• ✓ Allows customers to object to new sub-processors on reasonable data protection grounds

Current Sub-processors

The following sub-processors are currently engaged by Oli Labs:

Amazon Web Services (AWS)

Cloud infrastructure and hosting

United States (us-east-2)

All data categories including: contact information, conversation content, technical data, behavioral data, CRM data

AWS Privacy

OpenAI

AI/ML processing for chat capabilities and natural language understanding

United States

All data categories including: conversation content, contact information, technical data, behavioral data

OpenAI Privacy

Twilio SendGrid

Email

United States

Identifiers (name, email, phone number) and message content

Twilio Privacy

Data Categories Explained

The data categories processed by our sub-processors may include:

All Data Categories

• Contact Information: Name, email address, phone number, company name, job title
• Conversation Content: Chat messages, conversation history, inquiries, responses
• Technical Data: IP addresses, browser type, device identifiers, session data, cookies
• Behavioral Data: Website interactions, conversation patterns, engagement metrics, clickstream data
• CRM Data: Lead information, deal data, opportunity data, account information, sales stage
• Usage Data: Feature usage, timestamps, interaction frequency

Identifiers and Personal Information (Limited Set)

• Identifiers: Name, email address, phone number
• Message Content: Email, SMS, and WhatsApp messages sent through our platform

Data Transfer Mechanisms

Personal data processed by these sub-processors may be transferred to and processed in the United States. For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs
• Additional security measures and Transfer Impact Assessments
• Where applicable, EU-U.S. Data Privacy Framework certification

For more information about our international data transfer practices, please see our Data Processing Addendum.

Changes

We will post updates to this sub-processor list on this website page from time to time. 

Security and Compliance

All sub-processors are required to:

• Implement appropriate technical and organizational security measures
• Process personal data only in accordance with our instructions
• Maintain confidentiality of personal data
• Assist with data subject rights requests and security incident notifications
• Comply with applicable data protection laws
• Submit to audits and inspections as necessary

Regional Sub-processors

We may engage additional sub-processors on a regional basis to provide localized services or comply with data residency requirements. Any such regional sub-processors will be added to this list.

Questions?

If you have questions about our sub-processors or data processing practices, please contact us:

Email: privacy@olilabs.com

For general support inquiries: support@olilabs.com

Change Log

Date                                  Change Description

December 1, 2025.            Initial publication of  sub-processor list

This sub-processor list is part of our commitment to transparency and compliance with global data protection regulations including GDPR, UK Data Protection Laws, and other applicable privacy laws.

‍