Subprocessors
OneGTM LLC uses the services below to host, store or process client data when delivering its services. Tools a client already owns or licenses, or accounts held in the client's name, are the client's own systems and are not listed. Most engagements use only some of these.
Current subprocessors
| Service | Purpose | Client data involved | Location |
|---|---|---|---|
| Anthropic (Claude) | AI models for building and running automations | Records and working files read during a session | United States |
| OpenAI | AI models for building and running automations | Records and working files read during a session | United States |
| Google (Gemini) | AI models for building and running automations | Records and working files read during a session | United States |
| Railway | Hosts integration services (webhooks, scheduled jobs) | Environment variables (API keys and database credentials for connected tools), records in transit, logs | United States |
| Vercel | Hosts integration services and dashboards | Environment variables (API keys and database credentials for connected tools), records in transit, logs | United States |
| Supabase | Run log, configuration and pipeline database | Record IDs and run status; contact data and integration tokens when a working store is needed | United States |
| GitHub | Private code repositories | Code and configuration only | United States |
| Deepline Clay | Enrichment and waterfall routing | Business contact fields sent for enrichment | United States |
| Instantly HeyReach | Outbound sending, when OneGTM operates the account | Prospect name, email, company, LinkedIn URL | United States |
| 1Password | Credential storage | Client-issued credentials and API keys | United States / Canada |
| Granola Attio | Meeting notes and OneGTM's own client CRM | Notes from calls with client staff; no prospect data | United States / United Kingdom |
Changes
OneGTM updates this list before a new or replacement subprocessor begins processing client personal data. To get update emails, email gw@getaob.com with the subject "Subprocessor updates".
Clients may object on reasonable data protection grounds within ten days of an update, as set out in their agreement.