01OpenAI Sites and Cloudflare infrastructure
Website and application hosting, request handling and storage for workspace records, support and operational data. Cloudflare is part of the hosting infrastructure. Access and processing locations are governed by the applicable provider terms; this page does not claim dedicated regional hosting.
02WorkOS
Authentication, identity, session and organisation membership. Information includes account name, email, identity-provider identifiers and sign-in/security events. Social login may involve your selected identity provider.
03Stripe
Subscription checkout, customer billing portal, payment and invoice processing. Stripe receives information needed to manage and process payments. It may act as an independent controller for some payment, regulatory and fraud-prevention purposes; its role is not uniformly that of a subprocessor.
04Resend and optional CRM providers
Resend handles transactional support, enquiry and opted-in monitoring email when sending is activated. Recipient details and the message content are shared to deliver the email; delivery events are retained for troubleshooting. A connected HubSpot or Salesforce workspace processes the company records and authorisation details needed for the CRM actions you enable. These integrations remain inactive until separately configured and authorised.
05Global Database
Company-data, corporate relationship, AI research and monitoring services operated by Global Data Intelligence Limited. Company queries, AI questions and bounded follow-up context are sent to these services. Underlying datasets and processing may involve additional suppliers covered by the applicable Global Database service terms.
06Current scope and changes
This is a service-provider overview, not an executed processing agreement or an assurance about every underlying infrastructure supplier. Enterprise customers can request the applicable subprocessor list, locations, change-notice terms and contractual safeguards. Contact nbuldumac@globaldatabase.com for privacy, support and legal requests. Include the email associated with your account and the scope of your request; do not send passwords or API keys.