Subprocessors and Service Providers

Updated 11 October 2026

Twidget is operated by TWIDGET LIMITED, company number 14995704, 128 City Road, London, United Kingdom, EC1V 2NX. This page distinguishes suppliers processing customer application content from providers used for our own account, billing and support activities. The contracting entity and applicable supplier version are recorded in the relevant agreement; a brand name alone does not establish contractual coverage.

Twidget-appointed customer-data providers

Providers used where the relevant service is enabled
ProviderPurpose and informationLocation and terms
DigitalOceanHosting, volumes, object storage and backups for application/configuration/file data and necessary diagnostics/recovery.Current hosting is SFO3, United States. Processing and support access can involve other locations. Supplier DPA.
OpenAIContent and associated metadata submitted for enabled AI assistance or workflow actions. Not every customer request is sent to OpenAI.The observed project setting is Global, not EU-only. Applicable endpoint and access locations depend on the service configuration. Supplier DPA.

Platform account, billing and communication providers

Stripe processes subscription/payment references and related billing information under its applicable processor/controller roles, not general customer application storage. See its UK DPA and transfer addendum. Actual recipient entities and locations depend on the applicable agreement and services.

Namecheap Private Email handles platform communications and support, which may include necessary customer references. Product guidance identifies Phoenix, United States; applicable daily email backups may be retained up to four weeks. See the supplier DPA and Private Email terms. Any processor use of customer content must be covered by the applicable customer instructions and supplier authorisation.

Customer-selected destinations

Customers use their own Twilio and email-provider accounts and may configure Google, Slack, HTTP or other integrations. These destinations receive information according to the customer's authorised actions and provider arrangements; they are not automatically Twidget-appointed subprocessors simply because an integration is available. Twidget still processes credentials and content needed to run those actions and remains responsible for its own handling.

International transfers

There is no EU-only or UK-only data-hosting commitment. International transfers require the applicable adequacy decision or contractual safeguards and any necessary assessment; use of Twidget is not blanket consent to transfers.

Changes and objections

Where required under an executed customer DPA, Twidget will give advance written notice of new or replacement appointed subprocessors through the agreed customer contact and allow a reasoned data-protection objection before affected processing starts. This page is not a substitute for that notice. Contact Idris Kadri at info@twidget.io for the applicable supplier annex, transfer information or an objection.

Related information: Data Processing Agreement, Privacy Policy and Cookie Policy.

Have any questions? Get in Touch

Starting with Twidget is easy, fast and free

It only takes a few clicks to get started

Get started - it's free

No credit card required.


© Copyright 2026 - Twidget.io