Subprocessors
Data processing providers used to deliver Yanıtly services.
Last updated: 21 October 2026
A provider receives data only when the relevant feature or channel is used. This list covers service subprocessors and communication/payment providers that may also act as controllers for their own legal purposes.
| Name | Purpose | Data category | Location / country | Reference page |
|---|---|---|---|---|
| Hetzner Online GmbH | Application, database, backup and public object storage (media/catalog images) | Stored customer data, technical records and published media/catalog images | Germany | Hetzner Online GmbH — data protection |
| Cloudflare, Inc. | CDN, DNS, WAF and traffic protection | IP, request metadata; content passing through the proxy | Global network, including US | Cloudflare, Inc. — data protection |
| OpenAI | AI text, audio and image analysis | Selected messages/context, audio, images and model outputs | Including US; no EU-specific data residency | OpenAI — data protection |
| Meta | WhatsApp, Instagram and Messenger communications | Channel identifiers, recipients/senders, messages and media | Global, including US/EU | Meta — data protection |
| Netgsm | Telephone/SIP and SMS delivery | Phone numbers, call signalling/audio, SMS content | Türkiye | Netgsm — data protection |
| Verimor | Telephone/SIP carrier | Phone numbers, call signalling and audio | Türkiye | Verimor — data protection |
| Resend | Transactional email via SMTP | Recipient address, email content and delivery metadata | Email region depends on service configuration | Resend — data protection |
| Google Firebase (FCM) | Firebase Cloud Messaging notifications | Device token and notification payload | Global, including US | Google Firebase (FCM) — data protection |
| Apple (APNs) | Direct Apple Push Notification service (APNs) for call-desk VoIP calls | Device token, call identifier, team/line labels and notification payload | Global, including US | Apple (APNs) — data protection |
| PayTR | Payments and refunds | Contact, order/amount, IP and payment transaction information | Türkiye | PayTR — data protection |
| Turkcell e-Şirket | E-invoice and e-archive issuance | Invoice identifiers, tax/contact details and transaction amounts | Türkiye | Turkcell e-Şirket — data protection |
Locations describe the general data flow, not a single-country processing guarantee. OpenAI processing may take place in the United States; EU-specific data residency is not used. Transfer safeguards are assessed with the applicable agreements and service settings.
Changes update this page and its revision date. Where possible, new or replacement subprocessors are notified to the registered customer contact at least 30 days in advance; reasoned data protection objections can be sent to support.