Subprocessors and AI service providers list

Last updated: February 23, 2026

This list provides transparency on the third-party subprocessors and AI service providers that Shapr3D engages to support its operations, infrastructure, and AI-powered features. Each provider is evaluated for compliance with Shapr3D’s privacy, security, and data protection standards.

Subprocessors

The following entities may process personal data on behalf of Shapr3D.

Website visitors

Server-side data processing

The following subprocessors handle data generated through direct interactions with Shapr3D’s website servers.

Provider Name	Purpose of Processing	Categories of Personal Data	Location of Processing	Security & Compliance Information
Amazon Web Services, Inc. (AWS)	Website hosting, cybersecurity, incident management, and geographic-based customization for website visitors (e.g., shapr3d.com, discourse.shapr3d.com, app.shapr3d.com, account.shapr3d.com).	Visitor IP addresses and related technical metadata collected automatically for security and operational purposes.	EU servers	AWS Compliance Programs
Dealfront	Business intelligence and lead enrichment services for website visits, supporting analytics and cybersecurity purposes.	Company-level data inferred from visitor IP addresses (e.g., organization name, industry, and public business contact data); no personal data directly processed.	EU servers	Dealfront Data Protection

Cookie-based data processing

Data collected through cookies, tracking pixels, or similar technologies is managed in accordance with our Cookie Policy, maintained via Iubenda.

For details on cookies and third-party services used for analytics or marketing purposes, please refer to our Cookie Policy page.

Private individuals or companies using the application

Provider Name	Purpose of Processing	Categories of Personal Data	Location of Processing	Security & Compliance Information
Amazon Web Services, Inc. (AWS)	Operation and hosting of the Shapr3D application and related services (e.g., account.shapr3d.com, collaborate.shapr3d.com, support.shapr3d.com).	Name, email address, billing address, IP address, user ID, and data voluntarily provided by the user.	EU servers	AWS Compliance Programs
HubSpot, Inc.	Customer relationship management (CRM), marketing communication, and business correspondence.	Name, email address, company name, phone number, and communication history.	US servers	HubSpot Security Overview
Salesforce, Inc.	CRM and management of customer and enterprise accounts.	Contact details and customer relationship information.	EU servers	Salesforce Security and Privacy
Google LLC	Communication, video meetings, cloud storage, and productivity tools.	Name, email address, communication content, and files shared voluntarily.	US servers	Google Privacy & Terms
Zoom Video Communications, Inc.	Video conferencing and meeting communication.	Name, email address, meeting participation details, and any information voluntarily shared during calls.	US servers	Zoom Trust Center
WhatsApp Inc.	Business communication with users or clients through secure messaging.	Name, phone number, and message content shared by the data subject.	US servers	WhatsApp Privacy Policy
Microsoft Corporation (MS Teams)	Internal and external business communication, including calls and file sharing.	Name, email address, meeting details, and communication content.	EU servers	Microsoft Trust Center Overview
SendGrid (Twilio Inc.)	Transactional email delivery for system notifications and account communication.	Email address and message content.	US servers	Twilio Trust Center \| SendGrid Security Overview
Zendesk, Inc.	Customer support management, including ticket creation and resolution.	Name, email address, and message content in support inquiries.	EU servers	Zendesk Trust Center
Chargebee, Inc.	Subscription management and invoicing.	Name, email address, billing data, and payment identifiers.	EU servers	Chargebee Security and Compliance
Paddle.com Market Limited	Payment processing and subscription fulfillment.	Name, email address, payment data (limited to non-sensitive identifiers).	UK servers	Paddle Privacy Policy
Stripe, Inc.	Payment processing and subscription billing.	Name, email address, payment method details, and transaction metadata.	US servers (hosted on AWS)	Stripe Security & Privacy
Slack Technologies, LLC	Internal team communication and operational collaboration.	Name, email address, message content, and shared files.	EU servers	Slack Security Practices
Adyen N.V.	Payment processing and fraud prevention.	Name, billing details, and transaction metadata.	EU servers	Adyen Security Overview
Xero Limited	Accounting and financial record management.	Name, email address, billing address, and transaction data.	US servers (hosted on AWS)	Xero Security Notice
Nextcloud GmbH	Secure file storage for internal and audit-related documentation.	Uploaded files, which may contain limited contact or business data.	EU servers	Nextcloud Security
Nicereply	Customer satisfaction surveys following support interactions.	Email address, IP address, and survey feedback text.	US servers (hosted on AWS)	Nicereply Privacy Policy

Shapr3D or other CAD users volunteering for research interviews

Provider Name	Purpose of Processing	Categories of Personal Data	Location of Processing	Security & Compliance Information
Equafin Corp. d/b/a HeyMarvin	Recruitment and coordination of research participants, scheduling, and incentive handling support.	Name, email address, professional background information, and participation details voluntarily provided by the data subject.	Ireland / EU	Hey Marvin Privacy Policy
Zoom Video Communications, Inc.	Conducting remote research interviews and usability testing sessions.	Name, email address, meeting participation details, video/audio content shared during interviews.	US servers	Zoom Trust Center
Google LLC	Communication, calendar scheduling, and document storage related to research coordination.	Name, email address, communication content, and files voluntarily shared.	US servers	Google Privacy & Terms
Amazon Web Services, Inc. (AWS)	Secure hosting of research-related documentation and operational infrastructure.	Technical metadata and limited contact data where applicable.	EU servers	AWS Compliance Programs
User Interviews, Inc.	Recruitment and management of research participants.	Name, email address, demographic and professional profile data provided by participants.	US servers	User Interviews Privacy Policy
Tremendous LLC	Distribution of research incentives and participant compensation.	Name, email address, payment-related identifiers required to deliver incentives.	US servers	Tremendous Privacy Policy
Respondent Inc.	Recruitment and scheduling of research participants.	Name, email address, demographic and professional background data voluntarily provided.	US servers	Respondent Privacy Policy

People interacting with our social media platforms

Provider Name	Purpose of Processing	Categories of Personal Data	Location of Processing	Security & Compliance Information
Meta Platforms, Inc. (Facebook, Instagram)	Managing Shapr3D’s official social media presence, community engagement, and analytics (likes, comments, messages, and insights).	Social media username, public profile information, engagement activities (e.g., comments, likes, reposts).	US servers	Meta Privacy Policy
X Corporation (Twitter)	Operating Shapr3D’s official Twitter account, audience interaction, and marketing analytics.	Social media handle, profile information, and engagement activity (e.g., replies, reposts).	US servers	X Privacy Policy
LinkedIn Corporation	Sharing product updates, recruiting, and professional engagement through LinkedIn pages.	Profile name, position, company information, and interaction activity (e.g., reactions, comments).	US servers	LinkedIn Privacy Policy
TikTok, Inc.	Managing Shapr3D’s TikTok account for video content distribution and engagement analytics.	Username, profile information, and interactions (likes, comments, shares).	US servers	TikTok Privacy Policy
Pinterest, Inc.	Displaying visual content, posts, and inspiration boards related to Shapr3D products.	Username, profile information, and interaction data (pins, comments, reposts).	US servers	Pinterest Privacy Policy
Google LLC (YouTube)	Hosting and sharing educational and promotional video content.	Username, public comments, likes, viewing data, and engagement statistics.	US servers	Google Privacy & Terms
Reddit Inc.	Community interaction and brand awareness through official Reddit threads.	Username, post content, and engagement metrics (upvotes, comments).	US servers	Reddit Privacy Policy

People applying for jobs

Provider Name	Purpose of Processing	Categories of Personal Data	Location of Processing	Security & Compliance Information
Ashby, Inc.	Recruitment management platform used to collect, process, and organize candidate applications	Applicant name, contact information, resume/CV, employment history, and interview notes	USA	Ashby Privacy Policy

AI service providers

The following entities are Shapr3D’s trusted third-party AI partners:

Provider Name	Security & Compliance Information
Amazon Web Services, Inc. (AWS Bedrock)	AWS Compliance Programs \| AWS Service Terms
Google Gemini	Gemini API Additional Terms of Service \| Google AI Privacy and Terms \| Google AI Service Terms