Subprocessors and Third-Party Services
CapConnect uses third-party providers to deliver infrastructure, communications, analytics, payment, security, support, and model capabilities.
1 1. Subprocessor Categories
CapConnect may use providers for:
- cloud hosting and databases;
- content delivery and networking;
- authentication and identity;
- email delivery and inbox infrastructure;
- telephony, SMS, registration, and call recording;
- artificial intelligence and model inference;
- analytics, logging, and monitoring;
- customer support and communications;
- payment processing and billing;
- data enrichment and sales intelligence;
- error tracking and security;
- file storage and document processing; and
- professional services.
2 2. Current Provider Schedule
The table below lists current third-party providers CapConnect uses or may use to deliver CapConnect OS, communications, hosting, workflow automation, sales intelligence, and related services.
| Provider | Purpose | Data Categories | Processing Location |
|---|---|---|---|
| Vercel | Application hosting, deployment, and delivery | Account, application, log, and usage data | United States or provider regions |
| Supabase | Database, authentication, and storage | Customer Data, account data, authentication data, and application records | United States or provider regions |
| Amazon Web Services (AWS) | Cloud infrastructure, storage, compute, and related services | Customer Data, files, logs, backups, usage data, and operational metadata | United States or provider regions |
| Twilio | Telephony, SMS, number provisioning, call routing, communications metadata, and related messaging services | Phone numbers, communications, recordings, transcripts, delivery data, and metadata | United States or provider regions |
| Instantly | Email outreach, sending infrastructure, warmup or deliverability support, and campaign-related email operations | Email addresses, message content, campaign data, delivery metadata, and engagement data | United States or provider regions |
| Signal House | Data enrichment, sales intelligence, lead sourcing, and related go-to-market data services | Business contact data, account data, enrichment data, intent data, and related metadata | United States or provider regions |
| Sales Robot | LinkedIn outreach automation and related campaign workflows | LinkedIn account connection data, message content, prospect data, campaign activity, and engagement metadata | United States or provider regions |
| Stripe | Billing and payments | Billing, transaction, payment, tax, and contact data | United States or provider regions |
| AI and model providers | AI inference, enrichment, classification, drafting, scoring, summarization, and related automation | Inputs, outputs, prompts, message content, and metadata | United States or provider regions |
| Analytics, monitoring, and security providers | Error tracking, performance monitoring, analytics, abuse prevention, and security operations | Logs, device data, usage data, diagnostics, account metadata, and security event data | United States or provider regions |
3 3. Customer-Enabled Integrations
When Customer connects a third-party service, Customer instructs CapConnect to exchange data with that service. Customer is responsible for the third party’s terms, permissions, configuration, and continued authorization.
4 4. Changes
CapConnect may update this Notice as providers change. Where required by the DPA, CapConnect will provide notice of new subprocessors and a reasonable opportunity to object based on documented data-protection concerns.