Blossom Subprocessors

Version 0.1 — Last updated July 22, 2026

This page identifies third parties Polymath HQ, Inc. d/b/a Blossom engages to process Customer Personal Data when providing the Services. Capitalized terms have the meanings in the Data Processing Addendum.

1. How to read this list

In short: These are vendors Blossom hires. A service you independently connect under your own agreement is not added merely because Blossom accesses it for you.

The tables list Blossom’s active subprocessors by function. The source inventory did not establish contracted processing locations, so the location column is expressly marked for verification before publication. Customer’s deployment, configuration, and selected AI model determine which subprocessors receive Customer Personal Data.

Customer-Connected Services—such as Customer’s own Gmail or Google Workspace, Microsoft 365, Slack, Zoom, phone systems, notetakers, and other services in the connector directory—are selected and contracted for by Customer. They are not Blossom subprocessors merely because Customer directs Blossom to access them. Blossom’s own vendors that host, route, automate, or operate those connections are listed below.

2. Infrastructure, identity, communications, and payments

In short: These vendors provide Blossom’s core hosting, authentication, email, and billing infrastructure.

3. AI and model providers

In short: Depending on the selected workflow or model, Customer Data may be routed to these AI providers under contractual training and retention restrictions.

Blossom contractually restricts these AI-model providers from using Customer Data to train, develop, or improve their models. A high-risk or new AI model that cannot meet those restrictions may be enabled for a Customer account only with prior, affirmative, account-specific, revocable consent as described in the DPA.

4. Agent execution and automation

In short: These vendors help agents browse, run isolated code, convert files, and carry out workflows.

5. Token-holding integration providers

In short: These vendors may hold OAuth tokens and broker access to Customer-Connected Services at Customer’s direction.

6. Enrichment and support

In short: These vendors support company lookup and customer support interactions.

7. Planned additions not yet active

In short: Sendblue and Apify are not active subprocessors today. They will move into the tables only after notice and activation.

The following vendors are staged but are not currently authorized to process Customer Personal Data as active subprocessors:

Blossom will give the notice described below before either vendor begins processing Customer Personal Data.

8. Changes, notice, and objections

In short: Blossom gives 30 days’ notice before a new subprocessor starts; customers have 15 days to object on data-protection grounds.

Blossom will provide at least 30 days’ notice before authorizing a new subprocessor to process Customer Personal Data. A Customer may object by emailing legal@blossom.fm within 15 days after notice and explaining its reasonable, documented data-protection grounds. The parties will try in good faith to resolve the concern. If no commercially reasonable solution is available, Customer may terminate the affected Service before the new subprocessor begins processing and receive a pro rata refund of prepaid fees for the unused portion of that Service. Termination of the affected Service is Customer’s sole remedy for an unresolved objection.

An urgent replacement needed to protect security or service continuity may occur on shorter notice. Blossom will give notice as soon as reasonably practicable and preserve the objection process where feasible.

9. Subscribe to updates

In short: Email us to receive future subprocessor-change notices.

To subscribe, email legal@blossom.fm with the subject “Subprocessor Updates” and identify the Customer account and notice email. Customers are responsible for keeping that address current. Blossom may also provide notice to account administrators or through the Services.

10. Contact

In short: Questions and objections go to legal@blossom.fm.

Polymath HQ, Inc. d/b/a Blossom
New York, United States
Attention: Noah Lenz
legal@blossom.fm

Changelog

In short: This log records the initial list and every later addition, removal, or material purpose change.