---
title: "Subprocessors for client data | OneGTM"
description: "The services OneGTM LLC uses to host, store or process client data, with the purpose and location of each, and how to subscribe to updates."
url: https://getaob.com/subprocessors
---

# Subprocessors

Last updated October 22, 2026

OneGTM LLC uses the services below to host, store or process client data when delivering its services. Tools a client already owns or licenses, or accounts held in the client's name, are the client's own systems and are not listed. Most engagements use only some of these.

## Current subprocessors

| Service | Purpose | Client data involved | Location |
| --- | --- | --- | --- |
| [Anthropic (Claude)](https://trust.anthropic.com) | AI models for building and running automations | Records and working files read during a session | United States |
| [OpenAI](https://trust.openai.com) | AI models for building and running automations | Records and working files read during a session | United States |
| [Google (Gemini)](https://cloud.google.com/trust-center) | AI models for building and running automations | Records and working files read during a session | United States |
| [Railway](https://trust.railway.com) | Hosts integration services (webhooks, scheduled jobs) | Environment variables (API keys and database credentials for connected tools), records in transit, logs | United States |
| [Vercel](https://security.vercel.com) | Hosts integration services and dashboards | Environment variables (API keys and database credentials for connected tools), records in transit, logs | United States |
| [Supabase](https://trust.supabase.io) | Run log, configuration and pipeline database | Record IDs and run status; contact data and integration tokens when a working store is needed | United States |
| [GitHub](https://github.com/trust-center) | Private code repositories | Code and configuration only | United States |
| [Deepline](https://deepline.com/security) [Clay](https://trust.clay.com) | Enrichment and waterfall routing | Business contact fields sent for enrichment | United States |
| [Instantly](https://trust.instantly.ai) [HeyReach](https://www.heyreach.io/data-processing-addendum) | Outbound sending, when OneGTM operates the account | Prospect name, email, company, LinkedIn URL | United States |
| [1Password](https://trust.1password.io) | Credential storage | Client-issued credentials and API keys | United States / Canada |
| [Granola](https://trust.granola.ai) [Attio](https://trust.attio.com) | Meeting notes and OneGTM's own client CRM | Notes from calls with client staff; no prospect data | United States / United Kingdom |

## Changes

OneGTM updates this list before a new or replacement subprocessor begins processing client personal data. To get update emails, email [gw@getaob.com](mailto:gw@getaob.com?subject=Subprocessor%20updates) with the subject "Subprocessor updates".

Clients may object on reasonable data protection grounds within ten days of an update, as set out in their agreement.