Subprocessors

To deliver managed outbound services, Outword LLC ("Outword," "we," "us," or "our") uses a small set of vetted subprocessors. A subprocessor is a third party that Outword engages to process personal data on behalf of our clients as part of providing the services. This page explains how we work with subprocessors and how clients are kept informed of changes. It should be read together with our Privacy Policy and our Data Processing Addendum.

1. How We Use Subprocessors

Running a full outbound motion responsibly requires a few specialized providers, for example to host systems, manage relationships, validate data quality, schedule meetings, and support communications. Rather than reinvent every component, we rely on established providers that meet our standards, so we can focus on the strategy, execution, and accountability that clients engage us for.

Each subprocessor is selected for its reliability and its data protection posture, and is bound by data protection obligations that are no less protective than those we commit to in our Data Processing Addendum. Outword remains responsible to its clients for the performance of its subprocessors.

2. Categories of Subprocessors

The subprocessors we use generally fall into the following categories of support:

• Hosting and infrastructure providers that run the systems used to deliver the services.
• Customer relationship and workflow tools used to manage engagements and track outreach.
• Data validation and enrichment providers used to verify and improve the quality of target data.
• Scheduling and communications providers used to coordinate meetings and handle replies.
• Analytics and reporting providers used to measure and report on results.

3. Current List

4. How We Vet Subprocessors

Before engaging a new subprocessor, we assess it against our standards, which include:

• Appropriate technical and organizational security measures for the data involved.
• Contractual data protection commitments no less protective than our own.
• A clear purpose tied to delivering the services, with access limited to what is necessary.
• Suitability for any international data transfers, with appropriate transfer mechanisms in place.
• A track record of reliability and a credible posture on privacy and security.

Vetting is not a one-time exercise. We periodically review the subprocessors we rely on to confirm they continue to meet our standards, and we remove or replace any that no longer do.

5. Data Protection Commitments and Transfers

Each subprocessor that processes personal data is bound by a written agreement that imposes data protection obligations consistent with those in our Data Processing Addendum and applicable law. Where a subprocessor processes personal data in a country that has not received an adequacy decision, we put an appropriate transfer mechanism in place, such as the European Commission Standard Contractual Clauses, together with any required supplementary measures. We limit the personal data each subprocessor can access to what it needs to perform its function.

6. Our Responsibility

Engaging a subprocessor does not reduce our accountability. Outword remains responsible to its clients for the performance of its subprocessors and for their compliance with the applicable data protection obligations. If a subprocessor fails to meet those obligations, Outword remains responsible for the resulting processing as set out in the applicable agreement.

7. How Clients Are Notified of Changes

When we intend to add or replace a subprocessor that processes personal data on a client behalf, we provide the client with reasonable advance notice through the mechanism set out in the applicable Data Processing Addendum. This allows the client to review the change before it takes effect.

• Clients receive notice of intended additions or replacements as described in their agreement.
• A client may object to a new subprocessor on reasonable data protection grounds, and the parties will work in good faith to address the objection as set out in the agreement.
• Where an objection cannot be resolved, the agreement sets out the options available to the client.
• The current list is always available to clients on request.

8. Questions

For the current list of subprocessors, or any question about how we work with them, contact us at privacy@outword.io, or by mail at Outword LLC, [REGISTERED ADDRESS TO BE SPECIFIED].