Stillway Subprocessor List
Last Updated: April 8, 2026
Stillway uses trusted third-party service providers ("Subprocessors") to help deliver our Services. This page lists all Subprocessors that may process personal data on behalf of Stillway customers.
We update this list when we add or remove Subprocessors and notify affected customers via email.
Current Subprocessors
Infrastructure
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, storage, compute, encryption key management | All Platform data | United States |
Payments
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing | Customer billing info, transaction metadata, subscription status | United States |
| Square, Inc. | Payment processing | Transaction metadata, payment status | United States |
Communications
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Twilio, Inc. | SMS messaging, A2P 10DLC registration, phone number provisioning | Phone numbers, SMS message content, business registration data | United States |
| Twilio SendGrid | Transactional and marketing email delivery | Email addresses, email content | United States |
AI Services
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| OpenAI, L.L.C. | AI-assisted booking, conversational scheduling, note summarization | Booking conversation content, note content submitted for summarization | United States |
Analytics and Monitoring
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| PostHog, Inc. | Product analytics | Usage events, device data (anonymized where possible) | United States |
| Sentry (Functional Software, Inc.) | Error tracking and monitoring | Error reports, technical diagnostics (PHI scrubbed before transmission) | United States |
Integrations
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google LLC | Calendar sync (Google Calendar), OAuth authentication, Maps/Places API | Calendar availability data, authentication tokens, location/address data | United States |
Changes to This List
Stillway will:
- Add Subprocessors to this page at least 30 days before they begin processing data.
- Notify customers via email at least 30 days in advance of new Subprocessors.
- Remove Subprocessors from this list within a reasonable timeframe after they cease processing data.
Customers may object to a new Subprocessor within 30 days of notification by contacting privacy@stillway.ai.
Contact
For questions about our Subprocessors or data processing practices: privacy@stillway.ai