Subprocessors
Correction, October 6, 2026: earlier versions of this page named Microsoft Azure as our infrastructure provider and offered EU residency in Frankfurt. Neither was true: the hosted service runs on Amazon Web Services in the United States. No processor was added; the list now says who it always was.
Glime uses the following third parties to process customer data on our behalf. Each is bound by a data processing agreement at least as protective as ours.
| Subprocessor | Purpose | Data touched | Region |
|---|---|---|---|
| Amazon Web Services | Cloud infrastructure: the application server and its database (Lightsail), the website and content delivery (S3, CloudFront), server snapshots | All workspace content | US (us-east-1) |
| PayPal | Payment processing for self-serve checkout | Billing contact, order amount; card or PayPal details are entered on PayPal's page and held by PayPal only | US/EU |
| Stripe | Invoiced billing (Enterprise) | Billing contact, payment credentials (held by Stripe only) | US/EU |
| Anthropic | Glime AI — model-backed summaries, on the roadmap | Nothing today: no model is called yet. Listed ahead of use so the 30-day notice below is already given. When it ships, record content is sent per request under a zero-retention configuration and is never used for model training | US |
| Plausible Analytics | Privacy-first web analytics (the optional Analytics cookie category) | Anonymized usage events; no cookies, no PII | EU |
| Postmark | Transactional email (invites, alerts, receipts) | Recipient email addresses, notification content | US |
Advertising partner (marketing site only)
Separately from the processors above, the public marketing site shares visitor activity with an advertising partner. It never receives workspace content, does not run inside the app, and is not a subprocessor of customer data under the DPA — it receives marketing-site data as an independent party under its own terms.
| Partner | Purpose | Data shared | Opt out |
|---|---|---|---|
| Meta Platforms (Meta Pixel, Conversions API) | Measure and target Facebook and Instagram ads | Marketing-site page views and conversions, IP address, user agent, Meta cookie IDs; email, name and phone only as SHA-256 hashes | Do Not Sell or Share, Cookie choices, or Global Privacy Control |
Notification of changes
Workspace owners receive email notice 30 days before any addition. Objections on reasonable data-protection grounds: support@glimecrm.com — see the DPA §4 for the objection process.
Data residency statement
All workspace content, and every backup of it, is hosted in the United States (AWS us-east-1). EU data residency is not offered today; if that changes, this page and the 30-day notice above come first.