Appendix D. Subprocessors

Subprocessors

2026.1

Changineers engages the following third-party service providers (subprocessors) in the course of delivering the platform. This list covers services that may process or transit customer data. Workforce-only tooling is out of scope.

Subprocessor	Role	Data processed	Location
Amazon Web Services	Platform hosting: Cognito, Aurora, DynamoDB, S3, Lambda, CloudFront, API Gateway.	Authentication state, platform data, content, media, and recordings.	Australia. ap-southeast-2 (Sydney) primary; ap-southeast-4 (Melbourne) for disaster recovery replication.
Twilio	Video conferencing.	Live audio and video streams during calls; recordings held transiently until the call completes.	Australia. Media routing pinned to the AU region; recordings are migrated into AWS S3 (AU) on call completion.
Sentry	Application error monitoring.	Anonymised stack traces and crash reports. No customer personal information.	United States.
incident.io	Alert routing and incident response coordination.	Alert metadata and incident timelines. No customer personal information.	United States.

Any material change to this list (adding a subprocessor, changing a subprocessor’s role, or changing where customer data is processed) is reviewed by the Security Officer and reflected here. Customers with contracts that require prior notice of subprocessor changes are notified before the change takes effect.

Revision History

Date	Summary	Approved by
2026-04-24	Initial revision.	James Gregory