ApexReach engages the third-party subprocessors below to provide the Service. Each processes personal data on our behalf under contractual data-protection obligations. This list is maintained under our Data Processing Addendum.
| Subprocessor | Purpose | Data categories | Location |
|---|---|---|---|
| Vercel | Application hosting & edge network | All data in transit; logs | USA / global |
| Supabase | Primary database & storage | Account, billing metadata, lead data | [confirm region] |
| Clerk | Authentication & user management | Name, email, auth credentials | USA |
| Stripe | Payment & subscription processing | Billing contact, payment metadata | USA / global |
| Apify | Google Maps business scraping | Business listing data (lead data) | [confirm] |
| Apollo.io | Contact enrichment | Business contact / decision-maker data | USA |
| Bouncer | Email verification | Business email addresses | EU |
| Instantly.ai | Outbound email sending & inbox | Recipient business contacts, message content | USA |
| OpenAI | AI generation of outreach drafts | Prompt content (may include lead context) | USA |
| Anthropic | AI generation of outreach drafts | Prompt content (may include lead context) | USA |
| Resend | Transactional email delivery | Recipient email, message content | USA |
| Google (Gmail / Sheets APIs) | Inbox connection & data export | Customer-authorized mailbox / sheet data | USA / global |
We will provide notice of new subprocessors as described in our DPA. [COUNSEL/ENG: verify each entity name, region, and transfer mechanism, and set up a subscribe-to-changes mechanism.] Questions: [[email protected]].