Legal
Sub-processors
Version v1 · Last updated: 24 July 2026 · Draft pending legal review
Darify engages the third parties below to help provide the service. Each is bound by a written contract with data protection obligations no less protective than our own, and we remain responsible for their performance. We give notice before adding or replacing a sub-processor in a way that materially changes how your data is handled — see our Data Processing Agreement.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Amazon Web Services | Cloud hosting, databases, file storage | All platform and CRM data at rest | UAE (me-central-1) |
| Anthropic | AI Studio, Ask Darify, automated document reading | Prompts, attached files, scoped CRM records (contact details partly masked), identity documents submitted for verification | United States |
| Meta Platforms (WhatsApp Business Cloud API) | Sending and receiving WhatsApp messages | Customer phone numbers, message content, media, delivery and read receipts | United States / global |
| Meta Platforms (Instagram & Facebook Graph) | Creator social-account connection | Public handle, user id, follower count | United States / global |
| Stripe | Subscription and lead-fee payment processing | Cardholder and billing data, payer name and email | United States / EU |
| Google (Sign-In & YouTube Data API) | Social sign-in; creator YouTube connection | Account identity; public channel name and subscriber count | United States / global |
| TikTok | Creator social-account connection | Public profile basics and follower statistics | Global |
| X (Twitter) | Creator social-account connection | Username and public follower metrics | United States / global |
| Snap (Login Kit) | Creator account-ownership verification | Display name and external id only | United States / global |
| Resend | Transactional email (invitations, receipts, notifications) | Recipient email address and message content | United States |
| Dubai Land Department / Dubai Pulse | Licence and advertising-permit validation | Agency and broker licence identifiers submitted for checking | UAE |
Where a sub-processor is located outside the UAE, transfers rely on the conditions permitted by the UAE Personal Data Protection Law. Questions, or to object to a sub-processor on reasonable data protection grounds: privacy@darify.ae.