Sub-processors
This page lists the third-party sub-processors Boom Enterprise S.A.P.I. de C.V. engages to deliver its services. We maintain this list in accordance with our Data Processing Agreements with customers and applicable data protection laws, including LFPDPPP and GDPR.
Last updated: April 22, 2026
| Sub-processor | Country of location | Purpose of processing |
|---|---|---|
| OpenAI, L.L.C. | United States | AI model inference for the generation of conversation responses. OpenAI does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum. |
| Anthropic PBC | United States | AI model inference for the generation and review of conversation responses. Anthropic does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum. |
| Amazon Web Services, Inc. | United States | Cloud infrastructure hosting for application services, compute, and storage of personal data at rest. |
| Google LLC (Google Cloud Platform) | United States | Cloud infrastructure hosting for application services and storage of personal data at rest. |
| Neon, Inc. | United States | Managed PostgreSQL database hosting for storage of personal data, including interview transcripts, respondent contact details, and application data. |
| Vercel, Inc. | United States | Frontend application hosting and content delivery for the Boom web dashboard. |
| Helicone, Inc. | United States | LLM observability and logging of requests and responses exchanged with AI providers, for monitoring, debugging, and operational analytics. |
| Better Stack (BetterStack s.r.o.) | Czech Republic (European Union) | Application-level logging and monitoring of platform events and system activity. |
| Twilio Inc. | United States | Messaging infrastructure for delivery of conversation messages between Boom's platform and end users. |
| Meta Platforms, Inc. (WhatsApp Business API) | United States | Messaging infrastructure for delivery of conversation messages via WhatsApp. |
| Stripe, Inc. | United States | Payment processing and billing for Boom's business customers. Processes billing contact information only. |
| Google LLC (Google Workspace) | United States | Internal productivity tools (email, documents, calendar) used by Boom personnel. May incidentally process personal data when customers communicate with Boom via email. |
| Vanta Inc. | United States | Compliance automation platform that monitors Boom's internal systems for security and compliance purposes. Does not process customer personal data. |
OpenAI, L.L.C.
Country of location: United States
Purpose of processing: AI model inference for the generation of conversation responses. OpenAI does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum.
Anthropic PBC
Country of location: United States
Purpose of processing: AI model inference for the generation and review of conversation responses. Anthropic does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum.
Amazon Web Services, Inc.
Country of location: United States
Purpose of processing: Cloud infrastructure hosting for application services, compute, and storage of personal data at rest.
Google LLC (Google Cloud Platform)
Country of location: United States
Purpose of processing: Cloud infrastructure hosting for application services and storage of personal data at rest.
Neon, Inc.
Country of location: United States
Purpose of processing: Managed PostgreSQL database hosting for storage of personal data, including interview transcripts, respondent contact details, and application data.
Vercel, Inc.
Country of location: United States
Purpose of processing: Frontend application hosting and content delivery for the Boom web dashboard.
Helicone, Inc.
Country of location: United States
Purpose of processing: LLM observability and logging of requests and responses exchanged with AI providers, for monitoring, debugging, and operational analytics.
Better Stack (BetterStack s.r.o.)
Country of location: Czech Republic (European Union)
Purpose of processing: Application-level logging and monitoring of platform events and system activity.
Twilio Inc.
Country of location: United States
Purpose of processing: Messaging infrastructure for delivery of conversation messages between Boom's platform and end users.
Meta Platforms, Inc. (WhatsApp Business API)
Country of location: United States
Purpose of processing: Messaging infrastructure for delivery of conversation messages via WhatsApp.
Stripe, Inc.
Country of location: United States
Purpose of processing: Payment processing and billing for Boom's business customers. Processes billing contact information only.
Google LLC (Google Workspace)
Country of location: United States
Purpose of processing: Internal productivity tools (email, documents, calendar) used by Boom personnel. May incidentally process personal data when customers communicate with Boom via email.
Vanta Inc.
Country of location: United States
Purpose of processing: Compliance automation platform that monitors Boom's internal systems for security and compliance purposes. Does not process customer personal data.
Changes to our sub-processors
Boom may engage new sub-processors or replace existing ones from time to time. We will provide notice of such changes to customers with whom we have an active Data Processing Agreement, in the timeframes specified in that agreement (typically at least 10 business days in advance). Customers can request to be notified of changes by contacting sergio@useboom.ai with the subject line 'Sub-processor Notifications'.
Questions
For questions about this list or our data protection practices, please contact sergio@useboom.ai with 'Privacy' in the subject line.