Sub-processors
Version: 1.0 | Updated: January 5, 2026
This page lists third parties ("sub-processors") that Wharm uses to deliver the Service. Depending on configuration, some data may be processed outside Malaysia.
Core Sub-processors
Meta Platforms
WhatsApp Business Platform / Cloud API
- Purpose: Send/receive WhatsApp messages, deliver templates, handle media and messaging events
- Data categories: WhatsApp identifiers (phone numbers), message content, timestamps, metadata, media references
- Processing location: Global (Meta data centers). If Cloud API Local Storage is enabled, message data can be stored at rest in a selected region/country after processing.
Vercel
Hosting / Compute
- Purpose: Web app hosting, API execution
- Data categories: Account/session data, request metadata, application data processed by the API
- Processing location: Singapore (project configuration). Note: edge/network behavior may involve processing near end users unless regions are pinned.
Supabase
Database / Auth / Storage
- Purpose: Authentication, Postgres database, file storage, backend functions
- Data categories: Customer admin accounts, workspace configuration, contact records, conversation records (if stored), knowledge base content, attachments (if stored)
- Processing location: Asia Pacific (Singapore)
OpenAI
AI Processing
- Purpose: AI-assisted drafting, summarization, classification, embeddings (if enabled)
- Data categories: Message content or excerpts, knowledge base snippets, prompts/config, and related metadata
- Processing location: United States (API). Default retention for abuse monitoring logs is up to 30 days unless configured otherwise (e.g., Zero Data Retention).
Development Tooling
(Not Intended for Production Personal Data)
GitHub / Codespaces
- Purpose: Source code hosting, development environments, CI/CD
- Data categories: No production personal data intended. Production data should not be stored in repos, issues, or CI logs.
- Processing location: Varies by GitHub/Azure configuration.
Related Documents
Contact
Questions about sub-processors: