Subprocessors
The service providers that help us run Emerald CX. Each is bound by a contract that limits how it can use data. We give businesses 30 days' notice before adding a new one.
- Version
- 0.1 (draft)
- Effective
- October 27, 2026
Pre-launch draft pending attorney review. Emerald CX is not yet accepting paid accounts, so this document is not yet in effect.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Vercel | Application hosting, cookieless site analytics | All service data in transit; server logs | United States |
| Neon | Primary database (Postgres) | Account, customer, booking, sales and message records | United States |
| Stripe | Payments, card on file, subscriptions, sales tax | Payment details (we never store card numbers), customer name and email | United States |
| Twilio | Text messages, phone numbers, call recording | Phone numbers, message bodies, call recordings | United States |
| Resend | Transactional and marketing email | Email addresses, email content | United States |
| Anthropic | AI features (Ivy, Jade) on zero-retention, no-training terms | Message context needed to answer or summarize | United States |
| Deepgram | Voicemail and call transcription | Call audio | United States |
| Pusher | Live updates in the staff app | Record IDs only (no message content) | United States |
| Inngest | Scheduled reminders and automations | Record IDs and job metadata | United States |
| Upstash | Rate limiting | Hashed IP addresses and user IDs | United States |
| Cloudflare | Bot protection (Turnstile) on public forms | Browser signals during form submission | United States |
| Sentry | Error monitoring with personal data scrubbed | Technical error details | United States |
| Google Maps Platform | Address lookup and drive times for on-site jobs | Service addresses | United States |