Subprocessors
Last updated: March 27, 2026
The following sub-processors are engaged by OpenCream SAS (operating as Corial) to process Customer Data in connection with the provision of the Services. This list is maintained in accordance with our Data Processing Agreement (DPA), Section 3.4.
We will notify Customers at least 30 days in advance of any intended addition or replacement of sub-processors, giving Customers the opportunity to object in accordance with the DPA.
Current Sub-Processors
| Sub-Processor | Country | Purpose | Data Processed |
|---|---|---|---|
| Hetzner Online GmbH | Germany (EU) | Infrastructure hosting | All Customer Data (storage and compute) |
| Anthropic, Inc. | United States | AI processing (Claude API) | Communication content, contact data (transient — not stored by provider) |
| Google LLC | United States | AI processing (Gemini API), Google Workspace email integration | Communication content, contact data (transient for AI); email content (for connected Google Workspace accounts) |
| Deepgram, Inc. | United States | Voice/audio transcription | Audio recordings (transient — deleted after transcription) |
| Resend, Inc. | United States | Transactional email delivery | Recipient email addresses, email subject/body for system notifications (password resets, account alerts) |
| Bright Data Ltd. | Israel | Web-based business data enrichment | Company names, contact names (publicly available data only) |
| Telegram FZ-LLC | United Arab Emirates | Messaging interface | Message content, user identifiers (when Tenant uses Telegram integration) |
| Plausible Insights OÜ | Estonia (EU) | Website analytics | No personal data collected (aggregated, anonymous metrics only) |
International Transfer Mechanisms
For sub-processors located outside the European Economic Area, the following safeguards are in place:
| Sub-Processor | Country | Transfer Mechanism |
|---|---|---|
| Anthropic, Inc. | United States | Standard Contractual Clauses (SCCs), Module 3 (Processor to Processor) |
| Google LLC | United States | Standard Contractual Clauses (SCCs), Module 3 (Processor to Processor) |
| Deepgram, Inc. | United States | Standard Contractual Clauses (SCCs), Module 3 (Processor to Processor) |
| Resend, Inc. | United States | Standard Contractual Clauses (SCCs), Module 3 (Processor to Processor) |
| Bright Data Ltd. | Israel | EU adequacy decision (pending verification); SCCs as supplementary safeguard |
| Telegram FZ-LLC | United Arab Emirates | Standard Contractual Clauses (SCCs), Module 2 (Controller to Processor) |
Sub-processors located within the EU (Hetzner Online GmbH, Plausible Insights OÜ) do not require additional transfer mechanisms.
Change Notification
To receive notifications of changes to this sub-processor list, please ensure your account email is current. Notifications are sent at least 30 days before any change takes effect. If you wish to object to a new sub-processor, please contact privacy@corial.app within the notification period.
Contact
For questions about our sub-processors or data processing practices:
OpenCream SAS
15 Avenue Marie-Amélie
60500 Chantilly, France
Email: privacy@corial.app
See also: Privacy Policy · Terms of Service · Data Processing Agreement