Subprocessors
Last updated: October 26, 2026
These are the service providers that process customer data on our behalf to run everything. Each one is bound by a contract that requires it to protect that data and use it only to provide its service to us.
Services you connect yourself, such as Gmail, Outlook, LinkedIn or your own Slack, act on your instructions and are not listed here. See the privacy policy for how those integrations work.
Infrastructure
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Google Cloud Platform | Application hosting (Cloud Run), build pipeline, backups, Gmail push notifications | Data: All customer data in transit through the application | Location: United States |
| Supabase | Primary database and user authentication | Data: All customer content and account data | Location: United States |
| Backblaze | File storage for recordings, documents and attachments | Data: Uploaded files, call and meeting recordings | Location: United States |
AI
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic | AI model inference for features you trigger (assistant, briefs, drafting) | Data: The records and messages a feature works on. Not used for model training. | Location: United States |
| Deepgram | Transcription of calls and meeting recordings | Data: Call and meeting audio | Location: United States |
Communications
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Resend | Transactional and notification email from everything | Data: Recipient email address and message content | Location: United States |
| Twilio | Voice calls, SMS and phone numbers for the dialer | Data: Phone numbers, call audio, SMS content | Location: United States |
| Telnyx | Phone number carrier lookups | Data: Phone numbers | Location: United States |
| Apple Push Notification service | Push notifications to the iOS and Mac apps | Data: Device token and notification text | Location: United States |
| Firebase Cloud Messaging | Push notifications | Data: Device token and notification text | Location: United States |
Contact data and verification
7 providers. Providers that verify email addresses and phone numbers, and that find contact details you ask us to look up. They receive only the email address, phone number, or name and company being checked.
Customers can get the provider names on request under NDA from security@thetool.company.
Billing and analytics
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe | Subscription billing and payment processing | Data: Billing contact and payment details | Location: United States |
| PostHog | Product analytics | Data: Usage events, user and workspace identifiers | Location: United States |
| Slack | Internal operational alerts to our team | Data: Workspace names and error details | Location: United States |
Changes to this list
We update this page before a new subprocessor starts handling customer data. To be told about changes, or to ask about a provider, email security@thetool.company.