Download Shapr3D.
Download in seconds and get to your first model in 15 minutes.
Last updated: August 25, 2026
This list provides transparency on the third-party subprocessors and AI service providers that Shapr3D engages to support its operations, infrastructure, and AI-powered features. Each provider is evaluated for compliance with Shapr3D’s privacy, security, and data protection standards.
The following entities may process personal data on behalf of Shapr3D.
The following subprocessors handle data generated through direct interactions with Shapr3D’s website servers.
| Provider Name | Purpose of Processing | Categories of Personal Data | Location of Processing | Security & Compliance Information |
|---|---|---|---|---|
|
Amazon Web Services, Inc. (AWS) |
Website hosting, cybersecurity, incident management, and geographic-based customization for website visitors (e.g., shapr3d.com, discourse.shapr3d.com, app.shapr3d.com, account.shapr3d.com). |
Visitor IP addresses and related technical metadata collected automatically for security and operational purposes. |
EU servers |
|
|
Dealfront |
Business intelligence and lead enrichment services for website visits, supporting analytics and cybersecurity purposes. |
Company-level data inferred from visitor IP addresses (e.g., organization name, industry, and public business contact data); no personal data directly processed. |
EU servers |
Data collected through cookies, tracking pixels, or similar technologies is managed in accordance with our Cookie Policy, maintained via Iubenda.
For details on cookies and third-party services used for analytics or marketing purposes, please refer to our Cookie Policy page.
| Provider Name | Purpose of Processing | Categories of Personal Data | Location of Processing | Security & Compliance Information |
|---|---|---|---|---|
|
Adyen N.V. |
Payment processing and fraud prevention. |
Name, billing details, and transaction metadata. |
EU servers |
|
|
A-LIGN Compliance and Security, Inc. |
Security auditing, ISO 27001 / SOC 2 certification compliance, and third-party risk assessments. |
Audit-related data, employee/system metadata, and security evaluation logs. |
US servers |
|
|
Amazon Web Services, Inc. (AWS) |
Operation and hosting of the Shapr3D application and related services (e.g., account.shapr3d.com, collaborate.shapr3d.com, support.shapr3d.com). |
Name, email address, billing address, IP address, user ID, and data voluntarily provided by the user. |
EU servers |
|
|
Chargebee, Inc. |
Subscription management and invoicing. |
Name, email address, billing data, and payment identifiers. |
EU servers |
|
|
Drata Inc. |
Security compliance automation, audit evidence collection, and monitoring of application infrastructure. |
User account details, system access logs, and security telemetry data. |
US servers |
|
|
Gong |
Customer interaction analytics, sales conversation recording, and intelligence insights. |
Call/meeting audio & video recordings, transcripts, and contact information. |
US servers |
|
|
Google LLC |
Communication, video meetings, cloud storage, and productivity tools. |
Name, email address, communication content, and files shared voluntarily. |
US servers |
|
|
HubSpot, Inc. |
Customer relationship management (CRM), marketing communication, and business correspondence. |
Name, email address, company name, phone number, and communication history. |
US servers |
|
|
Microsoft Corporation (MS Teams) |
Internal and external business communication, including calls and file sharing. |
Name, email address, meeting details, and communication content. |
EU servers |
|
|
Nextcloud GmbH |
Secure file storage for internal and audit-related documentation. |
Uploaded files, which may contain limited contact or business data. |
EU servers |
|
|
Nicereply |
Customer satisfaction surveys following support interactions. |
Email address, IP address, and survey feedback text. |
US servers (hosted on AWS) |
|
|
Paddle.com Market Limited |
Payment processing and subscription fulfillment. |
Name, email address, payment data (limited to non-sensitive identifiers). |
UK servers |
|
|
Salesforce, Inc. |
CRM and management of customer and enterprise accounts. |
Contact details and customer relationship information. |
EU servers |
|
|
SendGrid (Twilio Inc.) |
Transactional email delivery for system notifications and account communication. |
Email address and message content. |
US servers |
|
|
Sequence HQ Limited |
Billing, financial operations, quoting, and contracting for application users. |
Billing details, transaction data, customer name, and email address. |
UK / EU servers |
|
|
Slack Technologies, LLC |
Internal team communication and operational collaboration. |
Name, email address, message content, and shared files. |
EU servers |
|
|
Stripe, Inc. |
Payment processing and subscription billing. |
Name, email address, payment method details, and transaction metadata. |
US servers (hosted on AWS) |
|
|
WhatsApp Inc. |
Business communication with users or clients through secure messaging. |
Name, phone number, and message content shared by the data subject. |
US servers |
|
|
Xero Limited |
Accounting and financial record management. |
Name, email address, billing address, and transaction data. |
US servers (hosted on AWS) |
|
|
Zendesk, Inc. |
Customer support management, including ticket creation and resolution. |
Name, email address, and message content in support inquiries. |
EU servers |
|
|
Zoom Video Communications, Inc. |
Video conferencing and meeting communication. |
Name, email address, meeting participation details, and any information voluntarily shared during calls. |
US servers |
| Provider Name | Purpose of Processing | Categories of Personal Data | Location of Processing | Security & Compliance Information |
|---|---|---|---|---|
|
Amazon Web Services, Inc. (AWS) |
Secure hosting of research-related documentation and operational infrastructure. |
Technical metadata and limited contact data where applicable. |
EU servers |
|
|
Equafin Corp. d/b/a HeyMarvin |
Recruitment and coordination of research participants, scheduling, and incentive handling support. |
Name, email address, professional background information, and participation details voluntarily provided by the data subject. |
Ireland / EU |
|
|
Google LLC |
Communication, calendar scheduling, and document storage related to research coordination. |
Name, email address, communication content, and files voluntarily shared. |
US servers |
|
|
Respondent Inc. |
Recruitment and scheduling of research participants. |
Name, email address, demographic and professional background data voluntarily provided. |
US servers |
|
|
Tremendous LLC |
Distribution of research incentives and participant compensation. |
Name, email address, payment-related identifiers required to deliver incentives. |
US servers |
|
|
Typeform SL |
Online surveys, feedback forms, and participant questionnaires. |
Name, email address, questionnaire responses, and voluntarily disclosed feedback data. |
EU servers |
|
|
User Interviews, Inc. |
Recruitment and management of research participants. |
Name, email address, demographic and professional profile data provided by participants. |
US servers |
|
|
Zoom Video Communications, Inc. |
Conducting remote research interviews and usability testing sessions. |
Name, email address, meeting participation details, video/audio content shared during interviews. |
US servers |
| Provider Name | Purpose of Processing | Categories of Personal Data | Location of Processing | Security & Compliance Information |
|---|---|---|---|---|
|
Dealfront |
Lead intelligence, company attribution, and analytics from social/website channels. |
IP addresses, company-level data inferred from IP addresses, and interaction metrics. |
EU servers |
|
|
Google LLC (YouTube) |
Hosting and sharing educational and promotional video content. |
Username, public comments, likes, viewing data, and engagement statistics. |
US servers |
|
|
LinkedIn Corporation |
Sharing product updates, recruiting, and professional engagement through LinkedIn pages. |
Profile name, position, company information, and interaction activity (e.g., reactions, comments). |
US servers |
|
|
Meta Platforms, Inc. (Facebook, Instagram) |
Managing Shapr3D’s official social media presence, community engagement, and analytics (likes, comments, messages, and insights). |
Social media username, public profile information, engagement activities (e.g., comments, likes, reposts). |
US servers |
|
|
Pinterest, Inc. |
Displaying visual content, posts, and inspiration boards related to Shapr3D products. |
Username, profile information, and interaction data (pins, comments, reposts). |
US servers |
|
|
Reddit Inc. |
Community interaction and brand awareness through official Reddit threads. |
Username, post content, and engagement metrics (upvotes, comments). |
US servers |
|
|
Sprout Social, Inc. |
Social media management, engagement tracking, and performance analytics. |
Public profile handles, social interactions, comments, and analytics metadata. |
US servers |
|
|
TikTok, Inc. |
Managing Shapr3D’s TikTok account for video content distribution and engagement analytics. |
Username, profile information, and interactions (likes, comments, shares). |
US servers |
|
|
X Corporation (Twitter) |
Operating Shapr3D’s official Twitter account, audience interaction, and marketing analytics. |
Social media handle, profile information, and engagement activity (e.g., replies, reposts). |
US servers |
| Provider Name | Purpose of Processing | Categories of Personal Data | Location of Processing | Security & Compliance Information |
|---|---|---|---|---|
Ashby, Inc. |
Recruitment management platform used to collect, process, and organize candidate applications |
Applicant name, contact information, resume/CV, employment history, and interview notes |
USA |
The following entities are Shapr3D’s trusted third-party AI partners:
| Provider Name | Security & Compliance Information |
|---|---|
Amazon Web Services, Inc. (AWS Bedrock) |
|
Google Gemini |
Gemini API Additional Terms of Service | Google AI Privacy and Terms | Google AI Service Terms |
