Draft, not in force. 4 blanks are still to be filled in.
Subprocessors
CRM Health, by [legal entity]. Last updated [effective date].
These are the companies that process data for us to run the app. We give at least 30 days' notice on this page before adding or replacing one, as our data processing agreement says.
| Company | What it does for us | Data it handles | Where |
|---|---|---|---|
| Vercel Inc. | Hosts the app and keeps its server logs | Everything the app processes, while it runs. Logs contain no names, email addresses, phone numbers or tokens | United States |
| [database provider] | Our database, and its backups | Everything the app keeps, as our privacy policy lists | [database region] |
| Amazon Web Services, Inc. | AWS Key Management Service holds the keys that protect our encryption keys | Encryption keys only. It never sees contact data | United States |
Not used: we use no email provider, error-tracking service, analytics service or AI model provider. If that changes, it will be listed here first.
HighLevel is not one of our subprocessors. It is the agency's own CRM platform, which the agency chose and controls. We read from it with the agency's permission.