Legal & trust
Subprocessors
The third parties that process data to provide Analytics Power, what each one receives, and where.
These are the third parties that process data on our behalf to provide Analytics Power. Each is bound by a contract that limits its use of the data to providing its service to us.
| Provider | What it does for us | Data it processes | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting (Workers), database (D1), content delivery, TLS, DDoS protection and bot checks (Turnstile). | All Service data, including account records, workspace data, the audit ledger, encrypted credentials, request metadata and IP addresses. | United States; global edge network |
| Anthropic, PBC | Language model (Claude) used to match a question to an approved metric, and to write the short summary of an answer. | Question text; the names of available metrics, dimensions and sites; for summaries, the metric name, column names and up to 20 result rows. Never credentials, connector tokens or account details. | United States |
| Resend | Sending transactional email: workspace invitations and account-recovery links. | Recipient email address and the message content (workspace name, inviter’s name, single-use link). | United States |
| Stripe, Inc. | Card payment processing for invoices issued through Main Street Suite. | Billing contact, payment method details and subscription history. We do not receive full card numbers. | United States |
Changes to this list
We will update this page at least 30 days before a new subprocessor begins processing customer personal data, and notify customers who have asked to be told. To be added to that list, or to object to a change under the Data Processing Addendum, email matt@coastalcarolinatech.com.