Draft — not yet in force. This document is being prepared and has not been finalized. It does not currently form an agreement, and the details it refers to are incomplete.
In short: These are the third parties that may handle customer data on our behalf, what each one does, and where it operates. We give 30 days' notice before this list changes.
Under our Data Processing Agreement we may engage sub-processors to help deliver Viewshed. Each is bound by obligations no less protective than that agreement, is prohibited from using customer data for its own purposes, and we remain responsible for its performance.
All of them are US companies and customer data is held in the United States. Cloudflare serves requests from a global edge network, so a page request may be answered from a location closer to the visitor; the stored data does not move.
| Sub-processor | What it does | Data it may process | Location |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting (Workers), file storage (R2), database connection pooling (Hyperdrive), CDN and DDoS protection | All customer data in transit; uploaded files at rest; request metadata including IP address | United States (primary). Requests are served from a global edge network; files are stored in the configured R2 region |
| Neon, Inc. | Managed PostgreSQL database | All customer data at rest | United States (configured database region) |
| Anthropic PBC | AI features: interview conversations, theme extraction, survey translation, alignment reports | Survey definitions and the response or transcript text submitted to an AI feature. Only used when a customer enables an AI feature. | United States |
| Resend, Inc. | Transactional and outreach email delivery | Recipient name and email address, message content | United States |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact and payment details. Card numbers are collected by Stripe directly and are never received or stored by us. | United States |
We give customers at least 30 days’ notice before adding or replacing a sub-processor. A customer may object on reasonable data protection grounds within that period; if we cannot resolve the objection, it may terminate the affected part of the Service and receive a pro-rata refund of prepaid fees. To receive these notices, write to [privacy@example.com].
The AI provider above only receives data when a customer switches on an AI feature. If no AI feature is enabled in a workspace, no survey response, transcript or stakeholder record from that workspace is sent to it. Customer content is not used to train generally available models.