Subprocessors

1. Overview

This page lists the subprocessors we currently engage to deliver the Avantwerk platform and related services. We will update this list when we engage new subprocessors or remove existing ones. Customers who have subscribed to notifications will be informed of material changes.

We maintain appropriate data processing agreements with each subprocessor. All subprocessors are contractually bound to process personal data only as instructed and to implement appropriate technical and organisational security measures.

For the complete and current list of HighLevel's own sub-processors, please refer to: https://www.gohighlevel.com/sub-processors

2. Primary Sub-processors

The following third-party subprocessors are engaged to deliver core platform functionality:

3. International Data Transfers

For subprocessors located outside the United Kingdom, we ensure appropriate safeguards are in place for all international transfers of personal data:

• UK International Data Transfer Agreement (UK IDTA): The UK-specific addendum to the EU Standard Contractual Clauses, approved by the ICO for lawful international transfers under UK GDPR.
• Standard Contractual Clauses (SCCs): EU-approved contractual terms for international transfers, used in conjunction with the UK IDTA where applicable.
• UK Extension to the EU-US Data Privacy Framework: For certified US-based processors participating in the UK extension.
• Supplementary Measures: Additional technical and organisational safeguards as required by Transfer Impact Assessments.

4. Subscribe to Updates

We will notify subscribed customers at least 14 days before engaging a new subprocessor or making material changes to existing subprocessor arrangements.

To subscribe to subprocessor update notifications, email [email protected] with "Subscribe to Subprocessor Updates" in the subject line.

5. Your Rights

As outlined in our Data Processing Agreement, customers have the right to:

• Object to Subprocessors: Raise objections to new subprocessors within 14 days of notification. We will work in good faith to address any reasonable objections.
• Request Information: Obtain details about subprocessor security measures, certifications, and data processing practices.
• Receive Updates: Subscribe to be notified of any changes to this subprocessor list before they take effect.
• Terminate: If we cannot reasonably address your objection to a new subprocessor, you may terminate the affected services in accordance with the Data Processing Agreement.

6. Contact Us

If you have any questions about our subprocessors or how personal data is processed, please contact us.