View project

HUMBEAR MEDIA LLC
Sub-Processor List
Third-Party Data Processors Used by Humbear Media, LLC
Effective Date: March 4, 2026 | Last Updated: April 11, 2026

ℹ This page lists the third-party sub-processors that Humbear Media, LLC engages to process personal data on behalf of our clients and users. Clients who have executed a Data Processing Agreement (DPA) or Business Associate Agreement (BAA) with Humbear Media are entitled to notice of material changes to this list.

‘Sub-processor’ means any third party authorized by Humbear Media to process personal data that Humbear Media receives from or on behalf of its clients, in connection with the provision of our services.

CRM & Marketing Platform

Sub-Processor Location HIPAA BAA Available Purpose
GoHighLevel USA Yes White-labeled CRM, email/SMS marketing, pipeline management, Voice AI, automation
Make.com (Integromat) USA / EU Yes (Enterprise) Workflow automation, data routing between systems
CallTrackingMetrics (CTM) USA Yes Call tracking, recording, routing, and analytics
Twilio USA Yes SMS delivery and phone number provisioning via GoHighLevel
Mailgun USA Yes Transactional email delivery

Advertising & Analytics

Sub-Processor Location HIPAA BAA Available Purpose
Meta Platforms (Facebook/Instagram) USA Limited (no standard BAA) Ad campaign management, audience targeting, conversion tracking
Google LLC (Ads, Analytics, DV360) USA Yes (Ads/GA4) PPC, display advertising, analytics, conversion measurement
Amazon DSP / Amazon Advertising USA Yes (Healthcare Approved) Display and programmatic advertising for healthcare clients
Pearl Diver / Black Pearl Group USA Yes Visitor identification, high-intent B2B/B2C audience data
Amplitude USA Yes Product and marketing analytics, event tracking
Ahrefs Estonia / USA No SEO performance analytics (non-PHI data only)

AI & Automation

Sub-Processor Location HIPAA BAA Available Purpose
OpenAI USA Yes (Enterprise) Voice AI, chatbot language models, content drafting
Anthropic (Claude via AWS Bedrock) USA Yes (via AWS Bedrock) AI assistant for internal productivity and content generation
HeyGen USA No (non-PHI use only) AI video avatar creation for marketing content
Fireflies.ai USA Yes Call transcription, meeting summaries, voice agent orchestration

Infrastructure & Security

Sub-Processor Location HIPAA BAA Available Purpose
Amazon Web Services (AWS) USA Yes Cloud hosting, S3 storage for Pearl Diver data delivery, infrastructure
Cloudflare USA Yes CDN, DDoS protection, DNS management
WordPress.com / WP Engine (confirm) USA Confirm Website hosting for humbearmedia.com
Railway US (multi-region) Yes Infrastructure hosting for n8n workflow automation
Neon AWS US-West-2, Oregon Yes Managed Postgres database for n8n