Sinch
Communications API · sinch.com · last read 2026-10-12
Identity
No identity observation recorded yet.
Data location
| Region | EU data location | Minimum plan | Source | Observed |
|---|---|---|---|---|
| EU | EU by default | — | mailjet.com | 2026-10-08 |
EU: The document says customer data is stored in Google Cloud Platform data centers in Frankfurt (Germany) and Saint-Ghislain (Belgium). It does not say the customer has to choose this, and it names no plan or extra cost.
Subprocessor chain
64 third parties · 34 of the vendor's own group companies · 55 with a country outside the EEA · all read 2026-10-08
| Subprocessor | Country | If hosted in the EU | Purpose |
|---|---|---|---|
| Ably Realtime Ltd | EU | — | Cloud Service for Live Updates |
| Advania Sverige AB | SE | — | Operations |
| Aiven Limited | EU, US, BR, IN | — | Infrastructure |
| Akixi Limited | US | — | UCaaS call center reporting: Call center reports |
| Amazon Web Services Australia Pty Ltd | AU | — | Hosting |
| Amazon Web Services EMEA SARL | IE, AU, DE, US, ZA, EU, BR, SG | — | Hosting; Contact Pro: Conversation content analysis; Voice API only: Text to Speech |
| Amazon Web Services Inc. | AU, BR, CA, IE, DE, SE, US, EU, SG, IN | — | Hosting; A2P Monetization only: Managed Service |
| Amplitude | US | — | Service used to track web analytics of platform usage. |
| AppCues Inc. | US | — | Infrastructure, User Onboarding, feature release announcements |
| Apple Inc. | — | — | Hosting, Infrastructure and Delivery of Messages |
| Ascenty Data Centers e Telecomunicações S/A. | BR | — | Hosting and Infrastructure |
| AssemblyAI, Inc. | IE, US | — | Speech-to-text conversions and conversation content analysis |
| Atlassian Corporation | US, EU | — | Support ticket tracking, Incident Management |
| Chargebee | EU | — | Billing |
| CloudAMQP | EU | — | Infrastructure |
| CloudFlare, Inc. | EU | — | Infrastructure |
| Cloudinary Ltd | US | — | Sinch SMS for Zoho Ecosystems Extension: MMS Hosting (US/AU) |
| Collaboration Betters The World APAC Limited | VN, HK | — | Service support provisioning |
| ConfigCat | EU | — | Application feature flagging |
| Datadog | US, EU | — | Observability |
| Deel Inc. | — | — | Customer Support, Project Management, Deployment, Service Provisioning, Managed Services |
| Deepgram, Inc. | EU | — | Chatlayer: Voice: Text To speech and Speech to Text capabilities |
| Emagine Consulting AB | EU | — | Service provisioning & support and Customer Support for Number Lookup, Chatlayer, WhatsApp, Messenger, Instagram, Rich Messaging, Flows |
| Emagine Poland | EU | — | Rich Messaging (WhatsApp): Service Provisioning, Development and Customer Support |
| Enghouse Systems Limited | US | — | UCaaS billing and invoice generation: Generates billing data and invoices for UCaaS customers |
| Equinix do Brasil Soluções de Tecnologia em Informática S.A. | BR | — | Hosting and Infrastructure |
| Equinix Inc. | US | — | Hosting |
| Extrinsica Global Ltd | US | — | Hosting |
| Force Technology Inc., (Paragon) | EU | — | Hosting and Infrastructure |
| GlobalConnect AB | SE | — | Hosting |
| Google Cloud EMEA Ltd | DE | — | Hosting |
| Google Cloud France SARL | DE, BE | — | Cloud datacenters |
| Google LLC | US, EU, DE, BE | DE, BE | Hosting and Infrastructure; In-App Calling only: Push notifications to devices; MailGun: Cloud datacenters; Messaging (MM2): Data Storage |
| Hetzner Online GmbH | EU | — | WhatsApp Hosting |
| Huawei Inc. | — | — | Push notifications to devices |
| InfoBank Corporation | KR | — | Hosting |
| J-Labs sp. z.o.o (Poland) | EU | — | Service Provisioning and Support; Conversation API: Service Provisioning, Development and Support |
| Jibe Mobile Inc. | EU, US, BR | — | Service Provisioning and Support |
| Logrocket | US | — | Service used to track customer action on our platform to debug errors |
| MacStadium Inc. | US | — | Cloud datacenters |
| Meta Platforms, Inc. | — | — | Delivery of messages |
| Microsoft Azure | US, EU | — | Voice API: Text To speech capabilities, Machine Learning |
| Moesif | US | — | Fax API: Observability |
| MongoDB Limited | EU, AU | — | Hosting and Infrastructure |
| NHN Corporation | KR | — | Delivery of messages |
| OpenAI, LLC | EU | — | Machine Learning |
| Oracle Svenska AB (Sweden) | EU | — | Database, Infrastructure, Support |
| OrecX (subsidiary of CallMiner) | US | — | UCaaS call recording: Recording call audio |
| PingCap Ltd | AU, EU, US | — | — |
| Raintank Inc., dba Grafana Labs | EU, US | — | Analytics and logs |
| RedHat Limited (Ireland) | EU | — | OS, Support |
| Reseau Group | US, IN | — | Support |
| Scaleway SAS (previously Online SAS) | FR | — | Hosting and Infrastructure |
| Sentry | US | — | Infrastructure, Observability |
| SFDC Ireland Ltd | US, DE, AU | — | Processing of customer data |
| Stripe Payments Europe, Limited | EU, US, IE | — | Billing; Mailjet & Mailgun: Support billing and payment systems |
| Tangent Internaltional Limited (UK) | — | — | Customer Support, Project Management, Deployment, Service Provisioning, Managed Services |
| TD Synnex | EU | — | Support: Hardware Support |
| Tencent Holdings Ltd. | EU, US, BR | — | Message Delivery to WeChat Recipients |
| TransUnion/NeuStar | US | — | Elastic SIP: STIR/SHAKEN Attestestion |
| Userlist, Inc. | US | — | Sinch SMS for Zoho Ecosystems Extension: Analytics |
| VAT Compliance UK Limited | IE, NL, DE, ZA | — | Internal Financial Operations (Order-to-Cash / E-invoicing and Source-to-Pay / Accounts Payable) |
| Zendesk, Inc. | US, EU | — | Customer support platform |
| Zesium Mobile DOO, Serbia | EU | — | Service Provisioning and Support |
Sinch's own group companies listed as subprocessors (34)
| Company | Country | Purpose |
|---|---|---|
| Cyclelogic do Brasil Mobile Solutions Ltda. | — | Messaging; Service Provisioning and Support |
| Cyclelogic México S. de R.L de CV. | MX | Service Provisioning and Support (Messaging) |
| Inteliquent Inc. | US | Service Provisioning and Support, Development (Voice API and In-App Calling, Verification, Number Lookup, Elastic SIP Trunking) |
| Mailgun Technologies, Inc. | US | Customer Support, Project Management, Deployment, Service Provisioning, Managed Services (Mailgun, Mailjet) |
| Mailjet SAS | FR | Customer Support, Project Management, Deployment, Service Provisioning, Managed Services (Mailjet) |
| Message4U Pty Ltd | AU, EU | Service Provisioning and Support, Development (Sinch Engage (MessageMedia)) |
| MessageMedia Europe Limited | EU | Service Provisioning and Support, Development (Sinch Engage (MessageMedia)); Legacy – to be retired |
| MessageMedia U.S.A. Inc. | US | Service Provisioning and Support, Development (Sinch Engage (MessageMedia)) |
| Nedimix S.A. | BR, EU | Chatlayer, Sinch Engage, MessengerPeople, Messaging (MM2); Support |
| Simple Texting LLC | US | Service Provisioning and Support, Development (Sinch SimpleTexting) |
| Sinch America Inc. (US) | US | Service Provisioning and Support |
| Sinch Australia Pty Ltd | AU | Whatsapp; Support |
| Sinch BR S.A. | BR | Chatlayer, Sinch Engage, MessengerPeople, WhatsApp, Messenger, Instagram, Conversation API, Sinch Push Notification, Messaging (MM2); Development, Support |
| Sinch Cloud Communication Services India Pvt Ltd | IN | Conversation API: Service Provisioning, Development, Customer Support, Project Management, Deployment, Managed Services |
| Sinch Colombia S.A.S | — | Messaging, VAS, Policy & Charging, SMS Firewall, Signaling Firewall, A2P Monetization; Customer Support, Project Management, Deployment, Service Provisioning, Managed Services |
| Sinch Communications Canada Inc. | CA | WhatsApp, Messenger, Instagram, Conversation API, Chatlayer, Sinch Engage; Development, Support |
| Sinch Communications Spain SL | EU | Messaging, Chatlayer, Sinch Engage, MessengerPeople, Campaigns; Service Provisioning and Support |
| Sinch de Peru S.A.C | — | Messaging; Service Provisioning and Support |
| Sinch Denmark Aps | EU | Messaging; Service Provisioning and Support |
| Sinch Denmark Aps (Denmark) | EU | Messaging: Service Provisioning and Support |
| Sinch DMCC | AE | Messaging, VAS, Policy & Charging, SMS Firewall, Signaling Firewall, A2P Monetization; Customer Support, Project Management, Deployment, Service Provisioning, Managed Services |
| Sinch Finland Oy | EU | Contact Pro, Number Lookup; Service Provisioning, Development, Support |
| Sinch France SAS | FR | Messaging, Campaigns, Conversation API; Service Provisioning and Support |
| Sinch Germany Gmbh | EU | Messaging; Service Provisioning and Support |
| Sinch Interconnect LLC | US | Messaging; Service Provisioning and Support |
| Sinch Malaysia Sdn Bhd | — | Messaging; Service Provisioning and Support |
| Sinch Operator Software AB | EU | Messaging, VAS, Policy & Charging, SMS Firewall, Signaling Firewall, A2P Monetization; Customer Support, Project Management, Deployment, Service Provisioning, Managed Services |
| Sinch Operator Software AB (Sweden) | EU | Customer Support, Project Management, Deployment, Service Provisioning, Managed Services |
| Sinch Phillipines Inc. | PH | Service Provisioning and Support, Development (Sinch Engage (MessageMedia)); To commence July 2024 |
| Sinch Poland Sp Zoo | EU | Messaging, VAS, Policy & Charging, SMS Firewall, Signaling Firewall, A2P Monetization; Customer Support, Project Management, Deployment, Service Provisioning, Managed Services, NOC Monitoring |
| Sinch Singapore Pte Ltd | SG | Messaging; Voice API and In-App Calling, Verification; Service Provisioning and Support |
| Sinch Sweden AB | EU | Messaging, Chatlayer, Sinch Engage, Rich Messaging, Voice API and In-App Calling, Contact Pro, Campaigns, Verification, etc.; Service Provisioning, Development, Support |
| Sinch Sweden AB (Sweden) | — | — |
| Sinch UK Ltd | GB | Messaging, Conversation API; Service Provisioning and Support |
The count outside the EEA is arithmetic over the country column, not a judgement about lawfulness. A transfer outside the EEA can be perfectly lawful; whether this one is depends on your use, not on the vendor.
Processing terms
From the vendor's data processing agreement · read 2026-10-09 · sinch.com
| Term | What the agreement says |
|---|---|
| Transfer mechanism | EU-U.S. DPF |
| Transfer mechanism | SCC module 2 |
| Transfer mechanism | SCC module 3 |
| Transfer mechanism | UK Addendum |
| Transfer mechanism | other |
| Notice of new subprocessors | 30 days in advance, via the subscription mechanism on the Sub-processor List page (only for customers who subscribe) |
| Notice of new subprocessors | SCC Clause 9(a) Option 2: at least 30 days in advance, in writing |
| If you object to one | Written objection on reasonable grounds within 10 business days of notice; Sinch won't appoint until reasonable steps are taken and explained in writing; if not resolved within a reasonable period, either party may terminate the Principal Agreement for cause |
| Breach notification | without undue delay |
| Audit | Compliance information on request; customer or third-party auditor may inspect only if Sinch has not given sufficient evidence (ISO 27001 certification or independent third-party audit/attestation report); at customer's cost with at least 30 days' notice |
| Audit | information reasonably necessary to demonstrate compliance, on reasonable request |
Terms as the agreement states them. Where it is silent on a term, there is no row; that is not a statement that the vendor does not offer it.
Assurance
| Scheme | Status | Scope | Source | Observed |
|---|---|---|---|---|
| GDPR | Claimed | — | sinch.com | 2026-10-08 |
| HIPAA | Claimed | — | sinch.com | 2026-10-08 |
| ISO27001 | Claimed | — | sinch.com | 2026-10-08 |
| ISO9001 | Claimed | — | sinch.com | 2026-10-08 |
| MEF Code of Conduct | Claimed | — | sinch.com | 2026-10-08 |
| SOC I & II | Claimed | — | sinch.com | 2026-10-08 |
| PCI DSS · PCIDSS | Claimed | — | sinch.com | 2026-10-08 |
Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.
Official registers
- ACN qualified cloud (Italy): checked 2026-10-12, no entry under Sinch
- DORA critical ICT third-party providers (ESAs): checked 2026-10-12, no entry under Sinch
- Data Privacy Framework List (US): checked 2026-10-12, no entry under Sinch
- EU Cloud Code of Conduct (GDPR Art. 40): checked 2026-10-12, no entry under Sinch
- FedRAMP Marketplace (US): checked 2026-10-12, no entry under Sinch
- SecNumCloud qualified services (ANSSI, France): checked 2026-10-12, no entry under Sinch
What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.
Support window
| Product | Support period | State | SBOM | Source | Observed |
|---|---|---|---|---|---|
| Sinch (service) | — | Service only | unknown | sinch.com | 2026-10-11 |
Vulnerability reporting: no security.txt at the well-known path (read 2026-10-11)
Documents
| Document | Disclosure | Transcription | HTTP | Observed |
|---|---|---|---|---|
| certifications | Public | full | 200 | 2026-10-08 |
| dpa | Public | full | 200 | 2026-10-09 |
| residency | Public | full | 200 | 2026-10-08 |
| subprocessors | Public | full | 200 | 2026-10-08 |
History
Nothing has moved since we started watching this vendor on 2026-10-08. Changes appear here only after a human has reviewed them.