Sub-processors

Brandmasters Media uses the third parties below to run the Brandmasters GTM platform. Each is bound by a contract that limits it to our documented instructions and requires appropriate technical and organisational measures.

This page is referenced by our Privacy Policy. It is the current list; see "Changes" at the bottom for how we handle additions.

Running the service

Sub-processor	What it does	Personal data it can see
Hosting provider	Runs the application servers and the background worker	Whatever is in transit through the application
Managed Postgres provider	Stores the platform database and its daily backups	All platform data: accounts, contacts, messages, approvals, audit trail

Finding and enriching accounts

Sub-processor	What it does	Personal data it can see
Apollo	Account and contact search, and matching against the client's ideal customer profile	Business contact details, employer, job title
Apify	Retrieves public professional posts to detect buying signals, without a login or cookies	Publicly posted professional content and its author
Prospeo	Contact data enrichment	Name, employer, job title, work email address
Hunter	Contact data enrichment	Name, employer, work email address
FullEnrich	Contact data enrichment, used as a fallback	Name, employer, job title, work email address

Verifying addresses before anything is sent

Sub-processor	What it does	Personal data it can see
MillionVerifier	Email address verification	Work email address
ZeroBounce	Email address verification	Work email address
NeverBounce	Email address verification	Work email address

An address that none of these can verify is never sent to.

Drafting

Sub-processor	What it does	Personal data it can see
Anthropic	Large language model used to draft outreach in the client's voice, grounded in a verified fact	The account facts supplied for that draft and the draft itself

Data sent for drafting is not used by the provider to train its models.

Sending and CRM

Sub-processor	What it does	Personal data it can see
SmartLead	Email sending, campaign management, and delivery and reply webhooks	Recipient address, message content, engagement and reply events
HubSpot	CRM synchronisation, where the client connects their own account	Contacts, activity, notes and tasks the client chooses to sync

Where a client connects their own account with a provider, that client's relationship with the provider governs it.

This website only

Sub-processor	What it does	Personal data it can see
Cal.com	Hosts the scheduling page behind "Book a call"	Name, email, company and any notes you enter when booking

Cal.com is not embedded in our pages. You only reach it by clicking through to their domain.

Alerting

Operational alerts about the health of the service — a failed job, a dead worker, a stuck queue — are delivered to our own operations channel. These carry system events, not client contact data.

Processing locations and transfers

Our sub-processors operate in a number of countries, including the United States. Where personal data leaves the UK or the European Economic Area we rely on an adequacy decision where one exists, and otherwise on Standard Contractual Clauses or the UK International Data Transfer Addendum.

The current processing location and the transfer mechanism for any individual sub-processor are available on request at support@brandmastersmedia.com, and are set out in the data processing agreement for clients who have one.

Changes

We add, replace and remove sub-processors as the service changes. This page is updated when we do, and the "Last updated" date at the top shows the current version.

Clients with a data processing agreement receive advance notice of a new sub-processor as that agreement requires, and may object on reasonable data protection grounds. To be told when this page changes, write to support@brandmastersmedia.com.

Related: Privacy Policy · Security · Terms of Use