{"id":26384,"date":"2026-05-20T10:00:00","date_gmt":"2026-05-20T10:00:00","guid":{"rendered":"https:\/\/rebillion.ai\/blog\/?p=26384"},"modified":"2026-06-04T17:09:51","modified_gmt":"2026-06-04T17:09:51","slug":"rebillion-sub-processor-list","status":"publish","type":"post","link":"https:\/\/rebillion.ai\/blog\/2026\/05\/20\/rebillion-sub-processor-list\/","title":{"rendered":"ReBillion Sub-Processor List 2026: Compliance Vendor Stack"},"content":{"rendered":"<p><strong>Quick answer.<\/strong> rebillion sub in 2026: ReBillion&#8217;s sub-processor list for 2026: the third-party vendors processing customer data on our behalf. This guide covers Why This Matters, Active Sub-Processors, Frequently Asked Questions.<\/p>\n<p><strong>ReBillion&#8217;s sub-processor list for 2026: the third-party vendors processing customer data on our behalf. Twilio (voice\/SMS, TCPA-compliant), AWS (hosting), OpenAI (selected non-PII processing under DPA), Anthropic, Stripe (billing), and the legal basis under GDPR Art. 28 and US state laws.<\/strong><\/p>\n<h2>Why This Matters<\/h2>\n<p>GDPR Art. 28 and most state privacy laws require disclosure of sub-processors. Brokerages need this list for their own DPA records and compliance audits. ReBillion publishes the list and notifies customers before adding new sub-processors.<\/p>\n<h2>Active Sub-Processors<\/h2>\n<p>Twilio Inc (voice\/SMS, US), AWS (hosting\/storage, US), OpenAI (selected non-PII processing under enterprise DPA), Anthropic (selected non-PII processing under DPA), Stripe (billing data), Plaid (banking verification where applicable), Postmark (transactional email).<\/p>\n<h2>Frequently Asked Questions<\/h2>\n<h3>What is a sub-processor?<\/h3>\n<p>A third-party vendor that processes customer data on behalf of ReBillion under a Data Processing Agreement. Examples: Twilio for voice, AWS for hosting.<\/p>\n<h3>Why does the sub-processor list matter to brokerages?<\/h3>\n<p>GDPR Art. 28 and state privacy laws (CCPA, VCDPA, others) require disclosure. Brokerages need the list for their own DPA records and to respond to data subject requests.<\/p>\n<h3>Does ReBillion notify before adding a sub-processor?<\/h3>\n<p>Yes. Customers receive 30 days notice before any new sub-processor begins processing. Existing customers have the right to object.<\/p>\n<h3>Where is data processed?<\/h3>\n<p>Primary processing in the US. Some sub-processors process in other regions; the location is disclosed per vendor.<\/p>\n<h3>How does ReBillion handle TCPA compliance with Twilio?<\/h3>\n<p>Twilio is used as the voice\/SMS infrastructure. TCPA consent is captured at file open by the brokerage and respected across all outbound calls. Opt-outs are honored immediately and persist across files.<\/p>\n<p><strong>Related reading:<\/strong> <a href=\"https:\/\/rebillion.ai\/blog\/tcpa-compliance-real-estate\/\">TCPA compliance<\/a>, <a href=\"https:\/\/rebillion.ai\/blog\/ai-transaction-coordinator-security-stack-2026\/\">Security stack<\/a>, <a href=\"https:\/\/rebillion.ai\/blog\/best-transaction-coordinator-software-2026\/\">Best TC software 2026<\/a>.<\/p>\n<p><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"What is a sub-processor?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Third-party vendor that processes customer data on behalf of ReBillion under a Data Processing Agreement.\"}}]}<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ReBillion&#8217;s sub-processor list 2026: Twilio, AWS, OpenAI, Anthropic, Stripe. GDPR Art. 28 disclosure, 30-day change notice, customer DPA pass-through.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","footnotes":""},"categories":[6560],"tags":[],"class_list":["post-26384","post","type-post","status-publish","format-standard","hentry","category-tc-guides"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"Vikas Malpani","author_link":"https:\/\/rebillion.ai\/blog\/author\/vikas\/"},"uagb_comment_info":0,"uagb_excerpt":"ReBillion's sub-processor list 2026: Twilio, AWS, OpenAI, Anthropic, Stripe. GDPR Art. 28 disclosure, 30-day change notice, customer DPA pass-through.","_links":{"self":[{"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/posts\/26384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/comments?post=26384"}],"version-history":[{"count":2,"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/posts\/26384\/revisions"}],"predecessor-version":[{"id":26485,"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/posts\/26384\/revisions\/26485"}],"wp:attachment":[{"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/media?parent=26384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/categories?post=26384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rebillion.ai\/blog\/wp-json\/wp\/v2\/tags?post=26384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}