Subprocessor List
Lists third-party subprocessors that process Personal Information, with their roles, the data they process, and locations.
Wooli Subprocessor List Last Updated: June 5, 2026
Table of Contents
- 1 Introduction and Purpose
- 2 Subprocessor Details
- 3 Compliance and Security
- 4 Notification of Changes
- 5 Contact Information
- 6 Reference Links
1 Introduction and Purpose
Wooli, Inc. ("Wooli"), acting as a service provider (processor) on behalf of Customers (who act as data controllers), engages third-party subprocessors to process Personal Information in providing the Wooli Subscription Service (the "Service"). The Service supports the upload, storage, and management of diverse data (including documents, personal information, and information on others) and features (such as task assignment, file sharing, and team coordination). This Subprocessor List, maintained pursuant to the Data Processing Agreement (DPA), identifies authorized subprocessors, their roles, and the types of Personal Information they process.
Customers authorize Wooli to engage these subprocessors under written agreements at least as protective as the DPA. Wooli will notify Customers of new subprocessors by email or through in-Service notifications, as described in Section 4. This list should be read together with the Wooli Terms of Service (ToS) and the Privacy Policy.
2 Subprocessor Details
The following subprocessors are engaged to provide the Service:
| Subprocessor | Service Provided | Data Processed | Location |
|---|---|---|---|
| Akamai Technologies, Inc. (Linode) | Cloud hosting and infrastructure | Customer Data and User Content (e.g., documents, personal information) and IT/technical data (e.g., IP addresses) | United States |
| Amazon Web Services, Inc. | Cloud hosting and storage | Customer Data and User Content (e.g., documents, personal information) and IT/technical data (e.g., IP addresses) | United States |
| Stripe, Inc. | Payment processing | Financial information (e.g., credit card details, billing data) | United States |
| Google LLC | Analytics and integration services | Usage and interaction data (e.g., application logs, clickstream data) and third-party data (e.g., Google login data, if enabled) | United States |
| PostHog, Inc. | Product analytics | Usage and interaction data (e.g., events, feature usage, clickstream data) and IT/technical data (e.g., IP addresses, device identifiers) | European Union |
| OpenAI, L.L.C. | AI provider for AI-powered features | User Content and inputs you submit to AI-powered features (e.g., prompts and content you choose to process) | United States |
| Anthropic, PBC | AI provider for AI-powered features | User Content and inputs you submit to AI-powered features (e.g., prompts and content you choose to process) | United States |
Note: Data processed includes the categories described in Section 3 of the Privacy Policy, such as identification and contact data, financial information, IT and technical data, authentication and security data, usage and interaction data, communication data, third-party data, and metadata and analytics data. Sensitive Personal Information (e.g., health or biometric data) is not processed unless explicitly enabled with appropriate safeguards.
3 Compliance and Security
Wooli ensures that each subprocessor is bound by a written agreement that meets or exceeds the data protection obligations in the DPA. Subprocessors implement industry-standard security measures, including encryption and access controls, as described in the DPA. Wooli remains responsible for its subprocessors' compliance with applicable data protection law. For HIPAA-enabled Subscriptions, subprocessors that handle Protected Health Information are covered by a Business Associate Agreement (BAA).
4 Notification of Changes
Wooli maintains this Subprocessor List and updates it when its subprocessors change. Wooli will notify Customers of new or replacement subprocessors by email (to the address associated with your Account) or through in-Service notifications. If you have reasonable data-protection concerns about a subprocessor, you may raise them with the Privacy Contact, and Wooli will work with you to address them. The current version of this Subprocessor List is published by Wooli.
5 Contact Information
For inquiries, objections, or questions about subprocessors, contact us at:
- Email: privacy@wooli.com
- Address: Wooli, Inc., PO Box 39, Estero, FL 33929
- Online: through the Wooli Website
Wooli is responsible for responding to inquiries about subprocessors.
6 Reference Links
The websites, pages, policies, and contact addresses referenced in this Subprocessor List are listed below. Where this Subprocessor List refers to a Wooli website, page, policy, or contact by name (for example, the Wooli Website, the Wooli Terms of Service, the Privacy Policy, the Data Processing Agreement, the Account Management Page, or the Subprocessor List), that reference means the corresponding resource identified in this section. Wooli may update the links below from time to time without altering the substance of this Subprocessor List.
| Resource | Link |
|---|---|
| Wooli Website | www.wooli.com |
| Wooli Terms of Service (ToS) | www.wooli.com/legal/terms |
| Privacy Policy | www.wooli.com/legal/privacy |
| Data Processing Agreement (DPA) | www.wooli.com/legal/dpa |
| Account Management Page | apps.wooli.com |
| Subprocessor List | www.wooli.com/legal/subprocessors |
| Privacy Contact | privacy@wooli.com |