Wingify and its affiliates (“Wingify”, “we”, “our”, or “us”) makes use of selected sub-processors to assist in providing the Services as defined in our Terms & Condition (“Terms”) while ensuring privacy and security as described in our Privacy Policy. Terms used on this page but not defined have the meaning set forth in our Terms.
A sub-processor is a third-party data processor retained by Wingify, who will or potentially process User data i.e. visitor of Wingify’s Customer’s website or application (which may contain Personal Information) while providing Services on our behalf. We engage different types of sub-processors to perform various functions as explained in the tables below.
We also collects some personal data from our Customers as outlined in our Privacy Policy as an independent Data Controller.
We uses a commercially reasonable selection process to evaluate the security, privacy and confidentiality practices of such sub-processors.
We act as an independent Data Controller for Customer Account Information, which includes the personal data of VWO application users and customer representatives. However, we act as a Data Processor for all Visitor Data (as defined below) that is processed and stored through the VWO application.
The list of sub-processors provided below applies to cases where we act as a Data Processor and the Customer acts as the Data Controller. Accordingly, the third parties mentioned herein serve as sub-processors engaged by us in connection with the processing activities performed.
A. Existing Customers
Customers who executed an agreement with us, subscribed to the VWO products, or were onboarded to our platform before 1 June 2026 will continue to be subject to the sub-processor list set out under Section A (Legacy VWO Sub-Processors), unless:
B. New Customers and Renewals After 1 June 2026
Customers who:
may be subject to both:
to the extent necessary to provide the products, features, and services used by such customers.
The applicability of any sub-processor depends on the specific products, modules, features, and services utilized by the customer.
Sub-processors involved in processing of Visitor Data
“Visitor Data” means Personal Data related to the end-user of Customer’s Properties or platform, more specifically as detailed in Annexure 1 to the Wingify DPA.
Section A – Legacy VWO Sub-Processors
The following sub-processors apply to customers who signed up, contracted with us, or were onboarded before 1 June 2026 and continue to use our products.
| Sr.No. | Sub-Processor Name | Purpose of Processing | Sub-Processor since | Location of Processing |
| 1 | Google Cloud Platform (Google LLC) | Cloud Hosting Services (SOC 2 Type 2, SOC 3 audited, ISO 27001,27017,27018 Certified) | December 2019 | United States, Europe and India |
| 2 | Amazon Web Services (Amazon.com, Inc.) | Cloud Hosting Services | April 2017 | Global |
| 3 | Cloudflare, Inc | For CDN, Cloudflare, Inc. (“Cloudflare”) provides content distribution, security and DNS services for web traffic transmitted to and from the Services, Secure and manage traffic to the Services, with access to URL interactions and IP addresses. | April 2017 | Global |
Section B – Additional Sub-Processors for the Combined VWO and AB Tasty Portfolio
The following additional sub-processors may apply to customers who enter into new agreements, renew existing agreements, upgrade services, or utilize functionality available through the combined VWO and AB Tasty product portfolio on or after 1 June 2026.
| Sr.N | Sub-Processor Name | Purpose of Processing | Sub-Processor since | Location of Processing |
| 1 | Google Cloud Platform (Google LLC) | Cloud Hosting Services | Jan 2019 | EU and USA |
| 2 | Amazon Web Services (Amazon.com, Inc.) | Cloud Hosting Services – Storage for personalization and targeting. | Jan 2015 | Global |
| 3 | Clickhouse | Cloud Hosting Services | July 2024 | EU and USA |
| 4 | Snowflake | Cloud Hosting Services | Sept 2025 | EU |
| 6 | Meilisearch | Visitor queries – Providing Visitor query results to Search API for presentation of Customer catalog products to the Visitor via the AB Tasty widget | Jan 2025 | EU |
Wingify undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of such sub-processors.
Wingify generally requires such sub-processors to satisfy equivalent obligations required from Wingify as set forth in applicable Data Protection Addendum and Data Protection laws.
For all Customers who have executed our standard DPA, We will provide notice of updates to the list of sub-processors that are utilized or which we proposes to utilize to deliver its Services. We undertake to keep this list updated regularly to enable its customers to stay informed of the scope of sub-processing associated with our products and services.
Pursuant to the DPA, We shall provide Customers with a minimum of fifteen (15) days’ prior written notice before engaging any new sub-processor. During this notice period, the Customer shall have the right to object to the appointment of such sub-processor on reasonable and legitimate grounds relating to data protection. If the Customer does not raise any objection within the specified notice period, the proposed sub-processor shall be deemed accepted by the Customer.
We will keep this list updated by adding the names of new or replacement sub-processors.
If you have any questions or concerns regarding our Sub-processor(s), you may write to [email protected], and we will try to resolve your concerns.