Moment uses a limited number of Subprocessors to operate and secure the Services. Each Subprocessor is contractually bound to confidentiality, security, and data protection obligations consistent with applicable law and no less protective than the Data Processing Addendum (Schedule B). Subprocessors are added or replaced only in accordance with Section 6 of the Data Processing Addendum.
Authorized Subprocessors
| Subprocessor | Purpose | Data Categories | Processing Location |
|---|---|---|---|
| Google Cloud Platform (GCP) | Application hosting, data storage, backups, logging, and security monitoring | All Personal Data processed through the Services | United States |
| Google (Google Calendar APIs) | Calendar authorization and delivery of Moment entries via OAuth | Calendar metadata and authorization tokens | Determined by Google for the End User’s account |
| Microsoft (Outlook calendar APIs) | Calendar authorization and delivery of Moment entries via OAuth | Calendar metadata and authorization tokens | Determined by Microsoft for the End User’s account |
| Google Workspace (Gmail and related services) | Support and internal communications | Email address and message metadata | United States |
| PostHog (product analytics) | Product analytics to understand and improve use of the Services | Usage and event data, technical data such as IP address and device or browser type, and, for signed-in users, account ID, name and email address | United States |
| Sentry (error monitoring) | Finding and fixing errors and performance problems in the Services | Error and performance data, device or browser type, approximate location from IP address, and, for signed-in users, account ID, name and email address | United States |
| Slack (team messaging) | Internal notifications to the Moment team about new sign-ups and invitations | Name, email address and sign-up details of new users | United States |
| Twilio (text messages) | Sending codes that verify a user’s phone number | Phone number | United States |
| Twilio SendGrid (email delivery) | Account emails to Client users, such as invitations, email verification and password resets | Name and email address | United States |
| Anthropic (AI) | AI assistant features | Name or email address, profile details and messages sent to the assistant | United States |
| Google Maps Platform | Venue maps shown in the Services | IP address and device or browser type when a map loads | Global (Google infrastructure) |
Notes
Moment does not use third-party data brokers or advertising networks.
This Subprocessor List may be updated from time to time. Where required by law or contract, Moment will provide notice of changes as described in Section 6 of the Data Processing Addendum.