Openwake · evidence pack

Customer.io

https://customer.io · record 553 · read 2026-10-13 · rules/v1 · generated 2026-10-23 04:18 UTC

Facts

Trains on customer data

unclear

No supporting text found in the documents read.

Opt-out mechanism

Directly from our customers, including contact information, demographic information, device information, location-derived event data if a customer enables location-based features, SMS recipient data, message content, sender information, delivery events, inbound message activity, opt-out or preferenc

“Directly from our customers, including contact information, demographic information, device information, location-derived event data if a customer enables location-based features, SMS recipient data, message content, sender information, delivery events, inbound message activity, opt-out or preference data, business identifiers, campaign or use-case information, and any other information that our customers provide us in connection with their use of the Services.”

AI features

none stated

No supporting text found in the documents read.

Model providers named

OpenAI, Google (Gemini / Vertex AI), Anthropic

“OpenAI, LLC AI model inference for optional AI-powered features”

subprocessors · https://customer.io/legal/sub-processors · confidence 0.60

Retention

not stated

No supporting text found in the documents read.

Hosting regions

not stated

No supporting text found in the documents read.

Subprocessor notice

5 days

“Company may object in writing to Customer.io’s appointment of a new or changed Subprocessor within five (5) calendar days of such notice, provided that such objection is based on reasonable grounds relating to data protection.”

dpa · https://customer.io/legal/dpa · confidence 0.55

Subprocessors (8)

Name	Category	Location	Quoted from
Amazon Web Services	hyperscaler	USA	“Amazon Web Services Cloud Hosting USA, EU” https://customer.io/legal/sub-processors
Google Cloud	hyperscaler	USA	“Google Cloud Platform Cloud Hosting, Analytics, AI USA, EU” https://customer.io/legal/sub-processors
Snowflake	other	USA	“Snowflake Data Warehousing, Analytics USA, EU” https://customer.io/legal/sub-processors
OpenAI	model provider	unstated	“OpenAI, LLC AI model inference for optional AI-powered features” https://customer.io/legal/sub-processors
Google (Gemini / Vertex AI)	model provider	unstated	“Google Cloud (Vertex AI) AI model hosting and inference for optional AI-powered features” https://customer.io/legal/sub-processors
Anthropic	model provider	unstated	“Anthropic (Claude) AI model hosting and inference for optional AI-powered features” https://customer.io/legal/sub-processors
Mailgun	other	USA	“Mailgun Customer Communications USA, EU” https://customer.io/legal/sub-processors
Twilio	other	USA	“Twilio Customer Communications* USA” https://customer.io/legal/sub-processors

Sources read

Document	URL	Read	Content hash	Ledger
privacy_policy	https://customer.io/legal/privacy-policy/	2026-10-13	180c0e122534e9fd…	seq 53253
subprocessors	https://customer.io/legal/sub-processors	2026-10-13	a462da78c5eaafff…	seq 53254
dpa	https://customer.io/legal/dpa	2026-10-13	cc1933e649a0034a…	seq 53255

Ledger proof for this record.
seq 53332 · key 2f898a895f05b7a0 · 2026-10-13T05:19:26.126Z
hash 404e5dec6b718573444d8059d0bf4e54eb8139b0cf27ee64046f78e499eb867c
prev ebf5a51e3a5eeab4c69038bf2a03dbd5ca256bcef974ddb0c08be9cb2122cc78
payload 67651a8511a2c850855b423d40c9aa716ef77dcb2041388f41e69c99dfd52c9c
signature G0TXs6KlTN9SsEIFOcV+hN2CvQgGuCkWdGh2jXQRT6wlSh60JS3FNIuWo2HHNOrytDcV2Prt6GXBRKP4QQPuBA==
anchored 2026-10-13 at head seq 53553 29b831e17d49be9d0c48e24c727cfa82ce9b500faacabb488dae167a42404d31
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.