Where a customer uses Gearset’s data migration, masking and/or backup solutions, Gearset processes Personal Data on behalf of the customer in accordance with the terms of our Data Processing Addendum (“DPA”).
In doing so, Gearset may engage external entities to carry out specific processing tasks in relation to that Personal Data. These Sub-processors are listed below, with a description of the service and their location.
Sub-processor | Location | Service |
Amazon Web Services, Inc. (“AWS”) | Seattle, Washington, USA* | Cloud Hosting Services - AWS owns the infrastructure that Gearset uses to host the Software and to process and store Customer Data. |
Intercom** | San Francisco, California, USA | Support platform -Gearset uses Intercom to manage customer interactions in one place. It offers fast, personalized support through a unified system. |
Open AI*** | San Francisco, California, USA | AI Organization - Gearset uses Open AI to provide it's AI enabled products and services. |
Browserbase**** | San Francisco, California, USA | Serverless Browser - Browserbase supports Gearset's Automated Testing product by allowing Gearset to autonomously read, write, and perform tasks on the web with a serverless browser. |
*NB. AWS is based in Seattle, but customers can choose to use Gearset through AWS’s USA, Canada, EU or Australia hosting locations.
**NB. Please note that Intercom has been in use by Gearset, and used by customers since February 2017. Intercom has now been added to the Sub-Processor list as we have seen an increase in customers sharing customer PII through the platform.
***NB. Please note that Open AI sub-processor addition only applies if using any AI enabled products or services which are opt-in.
****NB. Please note that this sub-processor addition only applies if using the Gearset Automated Testing product which is opt-in.
All of our Sub-processors are bound by contractual obligations to ensure that any Personal Data that they process is protected to at least the standard set out in our DPA.
For more information about our appointment of Sub-processors and your right to object to our use of new Sub-processors, please see clause 5 of our DPA.
For more information about how Gearset's processes Personal Data, see here.
For more information on our security posture, see our security overview.
For more information on our policies and terms, see our legal information and resources page.
This list may be updated by Gearset from time to time, by making updates on this website.
List last updated: 22nd December 2025