Sub-processors

Last updated: September 15, 2026

Orygo AI Srl uses the following sub-processors to provide Listmap, as described in the Data Processing Agreement. This page is Annex B of that agreement. How we handle the Customer's own account data is in the Privacy Policy.

We will update this list when we add or replace a sub-processor. Objections on reasonable GDPR grounds can be sent to davide@listmap.ai within 14 days of a change.

Current sub-processors

• Railway. Application hosting and managed PostgreSQL. Location: United States / European Union (provider regions). railway.app
• SuperTokens. Authentication, sessions, and email verification. Location: United States / European Union. supertokens.com
• Google LLC. Optional Google sign-in (OAuth). Location: United States. cloud.google.com
• Stripe, Inc.. Credit purchases and billing. Location: United States / European Union. stripe.com
• Resend. Transactional email (verification, invites, billing alerts). Location: United States. resend.com
• Prospeo. B2B company/people search and email/phone enrichment. Location: European Union (France). prospeo.io
• Serper. Google Places local-business search. Location: United States. serper.dev
• StoreLeads. Ecommerce store search and firmographics. Location: United States / Canada. storeleads.app
• OpenAI, LLC. Large-language-model inference for chat and column jobs. Location: United States. openai.com
• xAI. Large-language-model inference for chat and column jobs. Location: United States. x.ai
• Iubenda. Cookie banner on the public homepage. Location: European Union (Italy). www.iubenda.com

Enrichment and model providers receive only the identifiers and context needed for the job the Customer (or the Customer's agent) requested — for example a LinkedIn URL to reveal a work email, or row text to fill a column. They are not used to send outreach to prospects from Listmap.