Sub-processor List
Last updated 4 July 2026
This page lists the categories of third-party providers ("sub-processors") outr relies on to run the service. Each one only handles the personal data it needs for its job, under a data-processing agreement. Words used here have the meanings given in our Privacy Policy and Data Processing Addendum.
Where enabled and only with the visitor's consent, we use analytics and advertising providers, listed by category below. Recipient-side email open and click tracking on sent campaigns is done by our email-sending provider, not by us.
We do not publish the names of our individual providers here. A current list of the specific providers we use is available on request at support@tryoutr.io.
The categories we rely on
| Category | What they do | Data they handle | Region |
|---|---|---|---|
| Hosting and database | Store essentially all application data and run the app | Account-holder data, lead and recipient data, hashed sign-in credentials | Global; primary region on request |
| Authentication | Store and verify sign-in credentials | Account email and a hashed password (never stored by us in plain text) | Global; primary region on request |
| Payment processing | Take payment and manage subscription billing; handle all card data | Account email and customer identifier; card data collected directly by the processor | United States; operates globally |
| Email-sending infrastructure | Send approved campaigns, manage inboxes, and route replies | Lead emails, names, and companies; email sequence content; reply content and engagement stats | Global; primary region on request |
| Lead sourcing | Find business leads that match the customer's targeting, on the customer's instruction | Search criteria (titles, industry keywords, countries, company-size bands); returns lead records (email, name, title, company, LinkedIn URL, country) | Global; primary region on request |
| Lead-count estimation | Return a free count of how many leads match the criteria (no scrape, no charge) | Search criteria only; returns a count | United States |
| AI text generation | Draft email copy, follow-ups, reply suggestions, and answer product questions | Client and task context, and the prospect's reply text when drafting a reply | United States; operates globally |
| Inbox and domain provisioning | Set up sending inboxes and register domains and DNS | Persona details, the customer's website as a forwarding target, domain names, and our own setup credentials | Global; primary region on request |
| Transactional email | Send welcome, billing, and lapse notices (optional) | Recipient email address, subject, and body | United States |
| Error monitoring | Capture errors so we can fix problems (optional) | Error payloads that may contain limited context or identifiers | Global; EU hosting available, primary region on request |
| Analytics | Website analytics: understand how the site is used, only with the visitor's consent | Usage and device data | May be outside the EEA, including the United States |
| Advertising | Advertising measurement and pixel: measure and improve advertising, only with the visitor's consent | Online identifiers and activity | May be outside the EEA, including the United States |
The analytics and advertising providers operate only where enabled and only with the visitor's consent, as described in our Cookie Policy. Some of these providers are in the United States, and others operate globally. When personal data goes outside the European Economic Area, we rely on a valid transfer mechanism such as an adequacy decision, the EU-US Data Privacy Framework, or the European Commission's Standard Contractual Clauses, plus any extra safeguards needed. Ask us at support@tryoutr.io for detail on the transfers relevant to you.
How we tell you about changes
We keep this list current. Before we add a new provider or replace one, we update this page and give at least 30 days' notice to customers who have signed a Data Processing Addendum with us, by email or in-product notice.
During that notice period, a customer under a Data Processing Addendum can object to a new provider on reasonable data-protection grounds. We will work in good faith to address the objection. If we cannot resolve it, the customer can, as its only remedy, end the affected part of the service in line with the Data Processing Addendum and the main agreement.
Contact
Questions about this list: support@tryoutr.io.
Questions about this page? Email support@tryoutr.io.