Subprocessor List
Last updated: March 2026
The following third-party vendors process customer data on behalf of HeyDrop. We maintain Data Processing Agreements with all subprocessors and assess their security practices regularly.
| Subprocessor | Purpose | Location | DPA |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, compute, data storage, encryption key management (KMS), secrets management. All customer data stored in US regions. | US (us-east-1, us-west-2) | |
| Paddle | Payment processing, subscription management, invoicing, tax compliance | UK / US | |
| Google Analytics (GA4) - marketing site only | Anonymized analytics for the heydrop.com marketing website only. Not deployed in the HeyDrop product or admin/user dashboards. | US | |
| CookieYes | Cookie consent management and GDPR/CCPA compliance banner | UK | |
| Intercom | Customer support, live chat, help center, product tours | US (EU data processing) | |
| Google Tag Manager - marketing site only | Tag management for the heydrop.com marketing website only. Not used inside the HeyDrop product or admin/user dashboards. | US | |
| Calendly | Demo booking and meeting scheduling for enterprise sales | US | |
| Apple (APNs) | Push notifications for iOS devices | US | |
| Google (FCM) | Push notifications for Android devices | US (EU data processing) |
Change notifications: We provide 30 days advance notice before adding new subprocessors. To subscribe to updates, contact privacy@heydrop.app.