Outrizz Subprocessors
These are the third parties that process personal data for us when we provide the Outrizz app, the web workspace and our website. Each is bound by a written contract to use the data only to provide its service to us and to protect it to the standard of our Privacy Policy. We update this page before we add a new subprocessor.
| Provider | What it does for us | Personal data it receives | Location |
|---|---|---|---|
| Supabase, Inc. | database, sign-in with a one-time email link (including sending that email), file storage for captures | account data; Customer Content; Event Data | United States |
| Vercel Inc. | hosting of the API, the web workspace and the website; request logs | data in transit; logs | United States |
| OpenAI | AI models: reading photos and transcribing voice notes (in the app only after the user allows it); drafting and analysis in the web workspace | the content being processed | United States |
| Anthropic, PBC | AI models for drafting and analysis in the web workspace | the content being processed | United States |
| Google LLC (Gemini API) | AI models for drafting and analysis in the web workspace | the content being processed | United States and other Google locations |
| Perplexity AI, Inc. | AI models: reading photos and transcribing voice notes (in the app only after the user allows it); AI web research about events and companies | the content being processed; research queries, which can include company and person names | United States |
| Exa Labs, Inc. | web search for events and companies | search queries | United States |
| Langfuse GmbH (Langfuse Cloud) | monitoring and evaluating the quality of AI processing (LLM observability) | AI requests and results, including the content processed; kept for 30 days, then deleted; not used to train models | United States (Oregon) |
| Braintrust Data, Inc. | monitoring the quality of AI processing | AI requests and results, which can include the content processed | United States |
| Expo (650 Industries, Inc.) | delivering updates of the app's code to installed apps | a random installation identifier, the platform and the app version; no account data | United States |
| Unipile SAS | sending messages from users' own email and LinkedIn accounts, and reading the conversations Outrizz started | the user's connected-account access; messages and the contact details of their recipients | France (European Union) |
| PostHog, Inc. | product analytics in the web workspace | user and workspace identifiers; how features are used | United States |
| Stripe, Inc. | payments and billing | billing contact and payment details | United States |
AI providers process the content only to return a result to us. Under their API terms they do not use it to train their models, and they may keep it for up to 30 days to detect abuse.
Not subprocessors. Business-data providers from which we obtain business contact details and information about event participants supply data to us; they are sources, described in our Privacy Policy §3.3. GitHub (source code) and Figma (designs) receive no personal data from the Services. Apple processes App Store and device data as an independent party under its own terms. Google processes data from our website under its own terms, as described in our Privacy Policy §7 and Cookie Policy.