Wiggle Sub-Processor Guidelines

Wiggle uses carefully selected third-party service providers ("sub-processors") to support the delivery, maintenance, and improvement of our platform.

Last updated: October 29, 2025

Selection and Compliance

  • Wiggle evaluates all sub-processors for their security posture, privacy policies, and compliance certifications (SOC 2, ISO 27001, or equivalent).
  • Sub-processors are granted only the minimum access necessary to perform their contractual obligations and are prohibited from using customer data for any purpose other than providing the contracted services.
  • Each sub-processor is bound by a Data Processing Agreement (DPA) that ensures compliance with applicable data-protection regulations, including the GDPR and CCPA.

Current Sub-Processors

  • Amazon Web Services (AWS) - Cloud hosting and infrastructure. Processes encrypted metadata and authentication tokens. Data location: USA / EU.
  • MongoDB Atlas - Managed database service. Processes encrypted metadata and workspace configuration. Data location: USA / EU.
  • OpenAI, L.L.C. - Large Language Model API for natural-language processing. Processes transient message content for contextual AI responses. Data location: USA.
  • AssemblyAI - Audio transcription and summarization. Processes transient media content for transcription. Data location: USA.

Data Protection and Retention

  • No sub-processor stores Slack message content or personal data beyond the duration required to perform its specific function.
  • All data are encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Temporary processing data are automatically deleted once the service task is complete.
  • Sub-processors maintain strict data retention policies aligned with our privacy commitments.

Notification of Changes

  • Wiggle will notify customers of any intended additions or replacements of sub-processors by updating this page at least 30 days before the change becomes effective.
  • Customers may object to a new sub-processor by contacting privacy@wiggle-app.com.
  • We maintain transparency in our sub-processor relationships and provide advance notice of material changes.
  • Regular reviews ensure our sub-processor arrangements continue to meet security and privacy standards.

Contact Information

  • For privacy or data-processing questions, please contact privacy@wiggle-app.com.
  • We respond to inquiries within a reasonable timeframe and work to address any concerns you may have.
  • Our privacy team is available to discuss sub-processor arrangements and data protection measures.
  • You can also reach us by mail at: Wiggle, Inc., Sderot Yizhak Rabin 1, Hasharon, Israel.