Openwake · evidence pack

Customer.io

https://customer.io · record 209 · read 2026-09-05 · rules/v1 · generated 2026-09-06 04:03 UTC

Facts

Trains on customer data
unclear
No supporting text found in the documents read.
privacy policy · https://customer.io/legal/privacy-policy/ · confidence 0.20
Opt-out mechanism
* Directly from our customers, including contact information, demographic information, device information, location-derived event data if a customer enables location-based features, SMS recipient data, message content, sender information, delivery events, inbound message activity, opt-out or prefere
“* Directly from our customers, including contact information, demographic information, device information, location-derived event data if a customer enables location-based features, SMS recipient data, message content, sender information, delivery events, inbound message activity, opt-out or preference data, business identifiers, campaign or use-case information, and any other information that our customers provide us in connection with their use of the Services.”
privacy policy · https://customer.io/legal/privacy-policy/ · confidence 0.50
AI features
none stated
No supporting text found in the documents read.
privacy policy · https://customer.io/legal/privacy-policy/ · confidence 0.20
Model providers named
OpenAI, Google (Gemini / Vertex AI), Anthropic
“OpenAI, LLC AI model inference for optional AI-powered features”
subprocessors · https://customer.io/legal/sub-processors · confidence 0.60
Retention
not stated
No supporting text found in the documents read.
privacy policy · https://customer.io/legal/privacy-policy/ · confidence 0.20
Hosting regions
not stated
No supporting text found in the documents read.
privacy policy · https://customer.io/legal/privacy-policy/ · confidence 0.20
Subprocessor notice
5 days
“Company may object in writing to Customer.io’s appointment of a new or changed Subprocessor within five (5) calendar days of such notice, provided that such objection is based on reasonable grounds relating to data protection.”
dpa · https://customer.io/legal/dpa · confidence 0.55

Subprocessors (8)

NameCategoryLocationQuoted from
Amazon Web ServiceshyperscalerUSA
“Amazon Web Services Cloud Hosting USA, EU”
Google CloudhyperscalerUSA
“Google Cloud Platform Cloud Hosting, Analytics, AI USA, EU”
SnowflakeotherUSA
“Snowflake Data Warehousing, Analytics USA, EU”
OpenAImodel providerunstated
“OpenAI, LLC AI model inference for optional AI-powered features”
Google (Gemini / Vertex AI)model providerunstated
“Google Cloud (Vertex AI) AI model hosting and inference for optional AI-powered features”
Anthropicmodel providerunstated
“Anthropic (Claude) AI model hosting and inference for optional AI-powered features”
MailgunotherUSA
“Mailgun Customer Communications USA, EU”
TwiliootherUSA
“Twilio Customer Communications* USA”

Sources read

DocumentURLReadContent hashLedger
privacy_policyhttps://customer.io/legal/privacy-policy/2026-09-05ba7f46834d1e6d76…seq 141
subprocessorshttps://customer.io/legal/sub-processors2026-09-057c99bc893144c79c…seq 199
dpahttps://customer.io/legal/dpa2026-09-053bfdb48afece0f3d…seq 200
Ledger proof for this record.
seq 416 · key 2f898a895f05b7a0 · 2026-09-06T01:39:47.444Z
hash c124b8ac2194b7db02cc8c36e798d6f05be7d9ea82b172e2332c224d9c31de4e
prev 8cce9febb91afc2ab1ef8bea0bb5a39abc395f43f6da5dbb00553da386751827
payload 741f00c0ef7fd07aa3a4b876d3ef7b5f5ff9bbb6f01afbafa39b5537fd11987b
signature 4vMhNx4ev/GtsD6+FSd3qoF52I7F1QTOReOuYq65Hv+GkTct4D0f2AglEzUV9fKMbC+tUaZVhNO5OuFcUyToCA==
anchored 2026-09-06 at head seq 564 231a9dea0f93915bd7110e6786e00908325db3031635ace53c1023f850e0c49c
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.