---
title: "Bird Trust Center"
canonical: "https://bird.com/trust"
---

# Bird Trust Center

Explore how we protect your data. Find the security documents, independent assessments and answers you need to evaluate Bird.

## Standards you recognize.

Explore security assurance and privacy frameworks. Review the documents below for current status and platform coverage.

### Security assurance

- ISO/IEC 27001:2022
- SOC 2
- SOC 3

### Privacy & data protection

- GDPR
- UK GDPR
- CCPA
- CPRA
- HIPAA
- EU–US DPF
- UK Extension to the EU–US DPF
- PDPA
- PIPEDA
- Standard Contractual Clauses

Platform: Bird Platform

## Evidence for your security review

Start with Bird Platform, or select the platform your organization uses. Each published document and attestation lists its own scope. An assessment for one platform does not establish certification for another.

Use the document revision, validity dates and audit period when evaluating evidence. An assessment marked in progress has not been achieved. If current evidence is unavailable, ask your account team before relying on a certification claim.

## Security at Bird

Bird’s security program combines technical safeguards, staff training and ongoing risk assessment to protect customer data. Explore our general practices below, then use the documents for your selected platform to review service-specific details and certification coverage.

## Security governance

Our security and compliance teams work with engineering and operations to maintain security policies and assess risk. Internal assessments and a risk register guide mitigation work, with senior management reviewing audit findings and security risks.

## Infrastructure and physical security

Bird uses cloud infrastructure from Amazon Web Services and Google Cloud Platform, with separate development, staging and production environments. Our Data Processing Agreement describes the physical and organizational safeguards, including policies for remote work.

## Encryption

We encrypt customer data at rest and use TLS to protect sensitive information in transit over public networks.

## Access control

Access to internal systems follows job responsibilities and the principle of least privilege. We use role-based access controls, single sign-on and multi-factor authentication, review access regularly, and revoke access when employees leave.

## Application security

Secure coding practices, code reviews and a formal change management process support application development. We commission third-party penetration tests annually and develop remediation plans for critical and high-severity findings. Platform-specific test reports describe the systems and assessment period covered.

## Monitoring

We collect and protect audit logs and use a security information and event management (SIEM) tool to monitor our network and systems continuously. Security tools help us identify suspicious activity and deviations from established configurations.

## Endpoint security

Disk encryption protects data stored on company endpoints. Anti-malware and threat detection tools help protect endpoints and relevant production servers, with routine updates to keep those protections current.

## People security

Employees and contractors complete security and data protection training when they join Bird and annually thereafter. Employee confidentiality agreements and ongoing awareness programs reinforce their responsibilities for handling sensitive information.

## Incident response

Our incident management process defines how security events are reported, investigated and resolved. We track incidents through recovery and communicate with the relevant parties. Customer notification follows our breach notification procedure and the applicable agreement.

## Business continuity

Backup and recovery procedures support systems that store sensitive customer data. Business continuity and disaster recovery plans guide service restoration after an outage. Our public status page provides service updates that you can subscribe to.

## Privacy

Our Data Processing Agreement and privacy statement explain how we handle personal data and the responsibilities of Bird and our customers. We follow customer instructions for data retention and deletion, subject to applicable legal retention requirements.

## Vendor management

We assess third-party vendors against security requirements. Our published subprocessor list identifies providers that process customer data, their role and processing locations. You can subscribe to notifications when that list changes.

## What is Bird Platform?

Bird Platform is the current Bird platform for customer communications, bringing messaging channels and customer data into one platform. Choose Bird Platform when reviewing that product. Certifications for a legacy platform do not automatically cover Bird Platform.

## What do the other platform names mean?

Email (SparkPost) covers the email platform, including SparkPost email delivery. Connectivity refers to the communications APIs used for services such as SMS, voice and numbers.

Bird Box and CRM are the same platform, listed as Bird Box (CRM). Taxi for Email has its own platform selection. Check the scope on each document before using it for your review.

Pusher provides realtime messaging through Channels and push notifications through Beams. eDataSource provides email intelligence and deliverability tools. 24sessions provides video calling services. If you are unsure which platform your agreement covers, ask your Bird account team.

## Which certifications cover my platform?

Read the scope and effective status of each attestation below. Only a current attestation covering your selected platform supports a current claim. Missing or unavailable evidence does not establish that a platform is certified.

## How do I open confidential documents?

Select a document and sign in with your Bird account. Verify your email address and accept the current confidentiality agreement. You can read its exact text before agreeing. Confidential distribution may be temporarily unavailable.

## Do existing customers need another NDA?

Yes. Customers and prospects must accept the current Trust Center NDA before downloading confidential documents. You can reuse that acceptance across documents.

## How do I return to my documents?

Sign in with the same verified account. Acceptance of the current confidentiality terms can be reused across documents. When Bird publishes a new NDA version, you must review and accept it before their next confidential download. Access can still be withdrawn. Check validity dates even when an older document remains available.

## Where can I report a security issue?

Use Bird’s responsible disclosure program on HackerOne to report a vulnerability. The security contact is also published in bird.com/.well-known/security.txt. For a vendor questionnaire or platform-specific scope question, contact your Bird account team.

## Attestations

No published attestations are listed for this platform.

## Documents

### IS24 Network Security Policy v1.0

Bird - Network Security Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.0

Issued: 2026-06-09T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is24-network-security-policy-v1-0-8ea5dfa817cb26ee)

### IS23 Configuration Management Policy v1.2

Bird - Configuration Management Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-09T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is23-configuration-management-policy-v1-2-a56c608eb4541fcb)

### IS22 Access Control Policy v1.2

Bird - Access Control Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-08T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is22-access-control-policy-v1-2-a42e0638c301b731)

### IS21 Vulnerability Management Policy v1.2

Bird - Vulnerability Management Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-08T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is21-vulnerability-management-policy-v1-2-08bdbe3f80226336)

### IS20 Information Backup Policy v1.2

Bird - Information Backup Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-08T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is20-information-backup-policy-v1-2-776cb1c80175c2b0)

### IS19 Disposal of Equipment Policy v1.2

Bird - Disposal of Equipment Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-08T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is19-disposal-of-equipment-policy-v1-2-46310acfce0703e0)

### IS18 Development Outsourcing Policy v1.2

Bird - Development Outsourcing Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-09T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is18-development-outsourcing-policy-v1-2-ff31c9414bc554dd)

### IS17 Teleworking Policy v1.2

Bird - Teleworking Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-09T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is17-teleworking-policy-v1-2-b34ff9cb3c7dbcdf)

### IS16 Intellectual Property Policy v1.2

Bird - Intellectual Property Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-08T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is16-intellectual-property-policy-v1-2-bdc1a47844fabbdc)

### IS15 Information Security Risk Management Policy v1.2

Bird - Information Security Risk Management Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is15-information-security-risk-management-policy-v1-2-32070fb6acd100e7)

### IS14 Data Classification Policy v1.2

Bird - Data Classification Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is14-data-classification-policy-v1-2-245315f7dd996de9)

### IS13 Asset Management Policy v1.2

Bird - Asset Management Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is13-asset-management-policy-v1-2-0afe0ab8b916075f)

### IS11 Audit Log and Event Management Policy v1.2

Bird - Audit Log and Event Management Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is11-audit-log-and-event-management-policy-v1-2-a29a2321d64352a5)

### IS10 - Human Resources Security Policy v1.0

Bird - Business Continuity Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.0

Issued: 2026-06-10T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is10-human-resources-security-policy-69a2ec4e0dde4797)

### IS09 Business Continuity Policy v1.2

Bird - Business Continuity Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is09-business-continuity-policy-v1-2-856a85ff98bf0206)

### IS08 Third-party Security Policy v1.2

Bird - Third-party Security Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is08-third-party-security-policy-v1-2-892b5f674958415a)

### IS07 Incident Management Policy v1.2

Bird - Incident Management Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is07-incident-management-policy-v1-2-aaa14e250f061334)

### IS06 Data Protection Policy v1.2

Bird - Data Protection Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is06-data-protection-policy-v1-2-fc5284876af8f230)

### IS05 Cryptographic Key Management Policy v1.2

Bird - Cryptographic Key Management Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-25T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is05-cryptographic-key-management-policy-v1-2-2e66e691f3f928b1)

### IS04 Change Control Policy v1.2

Bird - Change control policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is04-change-control-policy-v1-2-e564eeee0ecb7bcc)

### IS03 Secure Development Policy v1.2

Bird - Secure development policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is03-secure-development-policy-v1-2-f9d9cc6f04be5db0)

### IS02 Roles and Responsibilities v1.2

Bird - Roles and responsibilities - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1. 2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is02-roles-and-responsibilities-v1-2-0390c9a72f0edca7)

### IS01a Acceptable Use Policy v1.2

Bird - Acceptable use policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is01a-acceptable-use-policy-v1-2-client-version-521d5b868ab3f5bd)

### IS01 Information Security Policy v1.2

Bird - Information Security Policy - Client version

Platforms: Bird Platform, Email (SparkPost), Connectivity, Bird Box (CRM), Pusher, Taxi for Email, eDataSource, 24sessions

Category: security_overview; visibility: gated

Revision: 1.2

Issued: 2026-06-04T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=is01-information-security-policy-v1-2-3d52a0c4a369ad7c)

### SOC2 Type I report

SOC 2 Type I report of Bird Holding B.V.'s Bird Platform, SMS and SMPP services, covering the Security and Availability trust service categories as of September 30, 2026.

Platforms: Bird Platform, Connectivity

Category: audit_report; visibility: gated

Revision: 1

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=soc2-type-i-report-b7e9d6341d2aa6db)

### Bird Platform pentest attestation letter

Attestation letter from Blaze Information Security for the manual penetration test of Bird Platform, performed in production from June 25th 2026, and finishing on July 1st 2026, including the retest results.

Platforms: Bird Platform

Category: penetration_test; visibility: gated

Revision: 1

Issued: 2026-09-10T00:00:00Z

Validity: current

[Open document](https://bird.com/trust?platform=bird_platform&document=bp-pentest-attestation-letter)

Source checked: 2026-11-03T17:34:59.759Z

## Related resources

[Data Processing Agreement](/legal/dpa)

[Privacy statement](/legal/privacy)

[Subprocessors](/legal/subprocessors)

[Responsible disclosure](https://hackerone.com/messagebird)

[Service status](/status)

## Subprocessors

**Approved Subprocessors**

**Last updated: 4 September 2026**

End-user personal data is processed by Bird as a processor on behalf of the customer for the provision of the services. The below entities act as subprocessors on behalf of Bird.

[Subscribe](https://messagebird.com/support-center/KB-Notification) to receive notifications when subprocessors change.

## All platforms

| Platform      | Service Name | Subprocessor Name                                     | Subprocessor Function                          | Processing Location      |
| ------------- | ------------ | ----------------------------------------------------- | ---------------------------------------------- | ------------------------ |
| All platforms | All services | [Bird Affiliates](/legal/terms#15-contracting-entity) | Performance of the Agreement, support services | The Netherlands, UK, USA |
| All platforms | All services | Anthropic Ireland Ltd. (end-user data optional)       | Customer Support AI LLM Service Provider       | USA                      |

## Bird platform

| Service Name           | Subprocessor Name                                    | Subprocessor Function                                          | Processing Location                                           |
| ---------------------- | ---------------------------------------------------- | -------------------------------------------------------------- | ------------------------------------------------------------- |
| All services           | Amazon Web Services EMEA SARL                        | Cloud Hosting Service Provider                                 | As determined by customer                                     |
| All services           | Not Just Tickets Ltd (Plain) (optional Subprocessor) | Internal Customer Support Ticketing System                     | UK                                                            |
| Email                  | Amazon Web Services EMEA SARL                        | Cloud Hosting Service Provider                                 | USA, Ireland (optional, as selected by customer)              |
| SMS                    | Google Cloud EMEA Limited                            | Cloud Hosting Service Provider                                 | The Netherlands, Belgium                                      |
| SMS                    | ClickHouse Inc.                                      | Analytics Database Service Provider                            | Ireland                                                       |
| SMS                    | Svix Inc.                                            | Webhook Delivery Infrastructure Provider                       | Ireland                                                       |
| WhatsApp for Business  | WhatsApp Ireland Limited                             | WhatsApp for Business Service Provider                         | USA                                                           |
| Voice                  | See All services                                     | See All services                                               | See All services                                              |
| Realtime (Mobile Push) | See All services                                     | See All services                                               | See All services                                              |
| RCS                    | Google Ireland Limited                               | Provision of Google RCS Business Messaging (RBM) services      | EU                                                            |
| RCS                    | Vibes Media, LLC                                     | Provision of Rich Communication Services (RCS) - US & CAN only | USA                                                           |
| Numbers                | Microsoft Azure                                      | Cloud Hosting Service Provider                                 | The Netherlands, Hong Kong, USA                               |
| Video                  | See All services                                     | See All services                                               | See All services                                              |
| Video                  | LiveKit Inc. (optional)                              | Conduit processing of video and audio streams                  | Global (close-to-customer, carrier peering and geo-spreading) |
| Workflows              | See All services                                     | See All services                                               | See All services                                              |
| Connectors             | See All services                                     | See All services                                               | See All services                                              |
| Omnichannel Widget     | See All services                                     | See All services                                               | See All services                                              |
| Contacts               | See All services                                     | See All services                                               | See All services                                              |
| Conversation Channels  | See All services                                     | See All services                                               | See All services                                              |

## Engagement Platform

| Service Name          | Subprocessor Name                                                    | Subprocessor Function                                   | Processing Location                                                                          |
| --------------------- | -------------------------------------------------------------------- | ------------------------------------------------------- | -------------------------------------------------------------------------------------------- |
| Inbox                 | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Email                 | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| SMS                   | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| SMS                   | Google Cloud EMEA Limited                                            | Cloud Hosting Service Provider                          | The Netherlands, Belgium                                                                     |
| SMS                   | Clickhouse Inc.                                                      | Analytics Data Base Service Provider                    | Ireland                                                                                      |
| Voice                 | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer) and Germany, Singapore, Australia, Brazil, USA |
| Numbers               | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Numbers               | Microsoft Azure                                                      | Cloud Hosting Service Provider                          | The Netherlands, Hong Kong, USA                                                              |
| WhatsApp for Business | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| WhatsApp for Business | WhatsApp Ireland Limited                                             | Provision of, WhatsApp for, Business services           | USA                                                                                          |
| RCS                   | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| RCS                   | Google Ireland Limited by means of their subsidiary Jibe Mobile Ltd. | Provision of, Google Business, Messages (RCS), services | EU                                                                                           |
| Conversation Channels | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Mobile Push           | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Video                 | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Video                 | LiveKit Inc. (optional)                                              | Conduit processing of video and audio streams           | Global (close-to-customer, carrier peering and geo-spreading)                                |
| Workflows             | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Connectors            | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Omnichannel Widget    | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Contacts              | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Payments              | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |
| Expenses              | Amazon Web Services EMEA SARL                                        | Cloud Hosting Service Provider                          | Ireland, India, USA (as selected by customer)                                                |

## Email platform

| Service Name         | Subprocessor Name                                                       | Subprocessor Function                                                   | Processing Location                                                     |
| -------------------- | ----------------------------------------------------------------------- | ----------------------------------------------------------------------- | ----------------------------------------------------------------------- |
| Cloud Email Sending  | Amazon Web Services EMEA SARL                                           | Cloud Hosting Service Provider                                          | Ireland (optional), USA                                                 |
| Recipient Validation | Amazon Web Services EMEA SARL                                           | Cloud Hosting Service Provider                                          | Ireland (optional), USA                                                 |
| Inbox Tracker        | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird |
| Competitive Tracker  | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird |
| PowerMTA             | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird |
| Momentum             | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird |
| Taxi                 | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird | These Email Services do not require processing of personal data by Bird |

## Connectivity platform

| Service Name          | Subprocessor Name                                                     | Subprocessor Function                                   | Processing Location                          |
| --------------------- | --------------------------------------------------------------------- | ------------------------------------------------------- | -------------------------------------------- |
| SMS                   | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium                     |
| SMS                   | Clickhouse Inc.                                                       | Analytics Data Base Service Provider                    | Ireland                                      |
| Voice                 | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium, Singapore, UK, USA |
| Numbers               | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium                     |
| Numbers               | Microsoft Azure                                                       | Cloud Hosting Service Provider                          | The Netherlands, Hong Kong, USA              |
| Contacts              | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium                     |
| WhatsApp for Business | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium                     |
| WhatsApp for Business | WhatsApp Ireland Limited                                              | Provision of, WhatsApp for, Business services           | EU and USA                                   |
| Google RCS            | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium                     |
| Google RCS            | Google Ireland Limited by means, of their subsidiary Jibe Mobile Ltd. | Provision of, Google Business, Messages (RCS), services | EU                                           |
| Conversation Channels | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium, Germany            |
| Omnichannel Widget    | Google Cloud EMEA Limited                                             | Cloud Hosting Service Provider                          | The Netherlands, Belgium                     |

## Omnichannel platform (Pusher, 24sessions and Telserv)

| Service Name                   | Subprocessor Name                    | Subprocessor Function                            | Processing Location                                                       |
| ------------------------------ | ------------------------------------ | ------------------------------------------------ | ------------------------------------------------------------------------- |
| Push Channels & Beams (Pusher) | Amazon Web Services EMEA SARL        | Cloud Hosting Service Provider                   | Ireland, Australia, Brazil, Japan, Singapore, South Korea, India, UK, USA |
| Push Channels & Beams (Pusher) | Sentry                               | Error monitoring                                 | USA                                                                       |
| Push Channels & Beams (Pusher) | Postmark                             | Dashboard - Log management and Analysis software | USA                                                                       |
| Video (24sessions)             | Amazon Web Services EMEA SARL        | Cloud Hosting Service Provider                   | Ireland, Germany                                                          |
| Video (24sessions)             | Digital Ocean                        | Turn Server provider                             | The Netherlands                                                           |
| Video (24sessions)             | Flowmailer                           | Email Service Provider                           | The Netherlands                                                           |
| Video (24sessions)             | Luzmo                                | In-app dashboard provider                        | Ireland                                                                   |
| Video (24sessions)             | Hubper (optional)                    | Online Learning Academy                          | The Netherlands                                                           |
| Video (24sessions)             | Google Cloud EMEA Limited (optional) | Speech to text conversion                        | Global                                                                    |
| Video (24sessions)             | Twilio (optional)                    | Recorded dial-in, SMS, Phone number verification | Global                                                                    |
| Numbers (Telserv)              | Google Cloud EMEA Limited            | Cloud Hosting Service Provider                   | The Netherlands, Belgium                                                  |
| Numbers (Telserv)              | Microsoft Azure                      | Cloud Hosting Service Provider                   | The Netherlands, Hong Kong, USA                                           |