Subprocessors
Subprocessors
WellDatabase · ctrlDev, LLC d/b/a WellDatabase · Last updated 12 August 2026
This page lists the third parties WellDatabase engages to process personal data on behalf of its customers. It is the authoritative list referred to in Section 11 of the WellDatabase Terms and Conditions and in Section 7.1 and Annex III of the Data Processing Agreement.
Current subprocessors
| Subprocessor | Location | Purpose | Personal data processed |
|---|---|---|---|
| Microsoft Corporation Microsoft Azure |
United States | Cloud hosting, storage, database, monitoring and platform services on which the Services run | All categories described in Annex I.B of the DPA |
| Microsoft Corporation Microsoft 365 |
United States | Business email, document storage and collaboration used for customer correspondence | Name, business email, telephone, job title, correspondence |
| HubSpot, Inc. | United States | Customer relationship management, support ticketing and in-application chat | Name, business email, telephone, job title, support correspondence and account history |
| Stripe, Inc. | United States | Subscription billing, payment processing and invoicing | Billing contact name, email and address; payment instrument data, which Stripe processes as a controller for its own purposes |
| PandaDoc, Inc. | United States | Preparation, delivery and electronic execution of Orders and related documents | Signatory name, business email, IP address and signature audit trail |
| Twilio Inc. Twilio SendGrid |
United States | Delivery of transactional and service email | Name, business email, message content and delivery metadata |
| PostHog, Inc. | United States | Product analytics and session recording, to identify usage trends and diagnose performance issues | Pseudonymous user identifier not linked to customer account records; IP address; device and browser data; in-application events; session recordings |
| Google LLC Google Analytics |
United States | Website and application traffic analytics | IP address; device and browser data; page and event data; pseudonymous online identifiers not linked to customer account records |
| Fathom Video Inc. | United States | Recording, transcription and summary of video calls with customer personnel | Name, business email, voice, image and transcript content of recorded calls |
Changes to this list
WellDatabase gives customers at least thirty (30) days' notice before engaging a new subprocessor or replacing an existing one. Notice is given by email to the customer's designated contact or through the Services.
A customer may object on reasonable data protection grounds within that period. The parties will discuss the objection in good faith; if it cannot be resolved, the customer may terminate the affected Services and receive a pro-rata refund of prepaid unused fees.
Where a subprocessor must be engaged at short notice to address a security or continuity risk, WellDatabase may do so on shortened notice and will notify customers as soon as reasonably practicable. The right to object described above still applies, exercisable within thirty (30) days of that notice.
Change log
| Date | Change |
|---|---|
| 12 Aug 2026 | List published in connection with Terms and Conditions v2026.10 and Data Processing Agreement v2026.10. |
Questions
Data protection enquiries: privacy@welldatabase.com
Legal notices: legal@welldatabase.com