Draft — not yet in force. This document is being prepared and has not been finalized. It does not currently form an agreement, and the details it refers to are incomplete.
In short: These are the third parties that may handle customer data on our behalf, what each one does, and where it operates. We give 30 days' notice before this list changes.
Under our Data Processing Agreement we may engage sub-processors to help deliver Viewshed. Each is bound by obligations no less protective than that agreement, is prohibited from using customer data for its own purposes, and we remain responsible for its performance.
All of them are US companies and customer data is held in the United States. Cloudflare serves requests from a global edge network, so a page request may be answered from a location closer to the visitor; the stored data does not move.
| Sub-processor | What it does | Data it may process | Location |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting (Workers), file storage (R2), real-time collaboration and rate limiting (Durable Objects), CDN, DDoS protection and email routing | All customer data in transit; uploaded files at rest; request metadata including IP address | United States (primary). Requests are served from a global edge network; files are stored in the configured R2 region |
| Neon, Inc. | Managed PostgreSQL database | All customer data at rest | United States (configured database region) |
| Anthropic PBC | AI features: interview conversations, theme extraction, survey translation, alignment reports | Survey definitions and the response or transcript text submitted to an AI feature. Only used when a customer enables an AI feature. | United States |
| Resend, Inc. | Transactional and outreach email delivery | Recipient name and email address, message content | United States |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact and payment details. Card numbers are collected by Stripe directly and are never received or stored by us. | United States |
| Mapbox, Inc. | Map tiles for map questions, map pins and showcase maps | The visitor's IP address, browser user-agent and the map area being viewed. No survey answers or account data | United States |
| OpenStreetMap Foundation | Fallback map tiles when the primary map provider is not configured | The visitor's IP address, browser user-agent and the map area being viewed. No survey answers or account data | United Kingdom, with tile servers worldwide |
| Google LLC (Google Fonts) | Typefaces a customer chooses for an infographic or showcase | The visitor's IP address and browser user-agent when a page using such a typeface loads. No survey answers or account data | United States |
We give customers at least 30 days’ notice before adding or replacing a sub-processor. A customer may object on reasonable data protection grounds within that period; if we cannot resolve the objection, it may terminate the affected part of the Service and receive a pro-rata refund of prepaid fees. To receive these notices, write to hello@viewshed.app.
The AI provider above only receives data when a customer switches on an AI feature. If no AI feature is enabled in a workspace, no survey response, transcript or stakeholder record from that workspace is sent to it. Customer content is not used to train generally available models.