Subprocessors
Glime uses the following third parties to process customer data on our behalf. Each is bound by a data processing agreement at least as protective as ours.
| Subprocessor | Purpose | Data touched | Region |
|---|---|---|---|
| Microsoft Azure | Cloud infrastructure, databases, storage | All workspace content (encrypted) | US (EU option: Frankfurt, Enterprise) |
| Stripe | Payment processing & billing | Billing contact, payment credentials (held by Stripe only) | US/EU |
| Anthropic | Glime AI features (summaries, quote drafting) | Record content sent per-request; zero-retention API configuration; not used for model training | US |
| Plausible Analytics | Privacy-first web analytics (consent-gated) | Anonymized usage events; no cookies, no PII | EU |
| Postmark | Transactional email (invites, alerts, receipts) | Recipient email addresses, notification content | US |
Notification of changes
Workspace owners receive email notice 30 days before any addition. Objections on reasonable data-protection grounds: privacy@glimecrm.com — see the DPA §4 for the objection process.
Data residency statement
Default hosting region is the United States. Enterprise workspaces may elect EU residency (Frankfurt), in which case workspace content, backups, and AI processing remain in-region; billing and transactional email metadata may still transit the US under SCCs.