Sub-processors
Third parties that process personal information on our behalf when we act as an operator or processor for a Gochi customer.
Effective 27 July 2026
1. Current sub-processors
| Sub-processor | Purpose | Location | Engaged |
|---|---|---|---|
| Domains.co.za | Hosts the Gochi application, database and file storage.All customer data stored in the platform. | South Africa | Always. |
| Microsoft Corporation | Microsoft Graph / Microsoft 365 mail access, where a customer connects a Microsoft mailbox.Mailbox contents and metadata for the connected mailbox. | Per the customer's own Microsoft 365 tenancy region. | Only when the customer connects a Microsoft 365 mailbox. |
| Customer-configured SMTP / IMAP providers | Sending and receiving mail using credentials the customer supplies.Outbound and inbound message content and recipient addresses. | Determined by the customer's chosen provider. | Only where the customer configures their own mail server. |
| Social and content platforms | Publishing content the customer schedules (e.g. Meta, LinkedIn, TikTok, Google/YouTube).Post content and media the customer submits, plus the connected account identifier. | Per each platform's own terms. | Only when the customer connects that platform. |
2. Notice of changes and your right to object
Customers give general written authorisation for us to engage the sub-processors listed above, in line with Article 28(2) of the GDPR. Before we add or replace a sub-processor we will update this page and notify account holders by email at least 30 days in advance.
You may object to a new sub-processor within 30 days of that notice by emailing welcome@gochi.tech with your reasons. We will work with you in good faith to find an alternative. If we cannot reasonably accommodate the objection, you may terminate the affected part of the service without penalty and receive a pro-rata refund of prepaid fees for the unused period.
We remain fully liable to you for the performance of each sub-processor's obligations, as required by Article 28(4) of the GDPR, and we impose terms on them that are no less protective than those we owe you, including in respect of onward transfers as section 72 of POPIA requires.
3. Related documents
See our Privacy Policy and Terms of Service. A data processing addendum incorporating the EU Standard Contractual Clauses is available from welcome@gochi.tech.