Subprocessors
About this list
Beyond the Edge Lead Engine uses the providers below to operate the Service. Each processes personal data only to provide its function, under terms that restrict its use, and with an appropriate transfer mechanism where personal data leaves its region of origin. We will update this page before adding a provider that handles personal data. Customers who object to a new provider on reasonable data-protection grounds may raise it with us and, if it cannot be resolved, may terminate the affected feature or their subscription as described in the Data Processing Agreement.
Active today
These providers handle data now.
- Cloudflare, Inc. (USA, distributed edge) - application hosting, database, key-value storage, object storage, DNS and network protection. Data touched: all Service data, including Customer Data, and traffic metadata.
- Anthropic PBC (USA) - the drafting and research engine, where a workspace uses the shared platform engine or connects its own Anthropic key. Data touched: the lead and message context needed to produce a draft or run a research query, which can include business contact details and message content. Not used to train general-purpose models.
- Google LLC (USA, global) - web fonts only, on the application shell and pricing page. Data touched: the visitor's IP address and user agent, disclosed to Google by the browser when it fetches the font files. No Service data is sent. The pages under /legal use system fonts and make no such request.
Configured but inactive
These integrations exist in the product and will handle data as soon as credentials are supplied, but hold no production credentials as of the date of this page and therefore process nothing today. They are listed in advance so this page does not go stale the moment one is switched on.
- OpenAI, L.L.C. (USA) - alternative drafting and research engine, selectable per workspace and used automatically as a fallback if it is the only engine with a usable key. Data touched: the same context as the drafting engine above.
- Stripe, Inc. (USA, global) - subscription billing, invoices, and the customer billing portal; and Stripe Connect where a customer collects payments from their own clients, in which case the client's email address is sent for the receipt. Data touched: account holder billing details and payment method. Card numbers never reach our servers.
- Resend, Inc. (USA) - email sent by the platform itself rather than from your inboxes: password resets, email confirmations, billing receipts, contract signing requests to your clients, and reply notifications to your teammates. Data touched: recipient email address and message content, which for a reply notification includes a short excerpt of the reply a lead sent you.
- SignWell, Inc. (USA) - electronic signature for customer client contracts, where enabled. Data touched: the full agreement document plus signer details including name, email, signature record and network address. This runs on a platform account shared across customers, which is why a daily contract limit applies.
- Twilio Inc. (USA, global) - click-to-call telephony, only for a workspace that connects its own Twilio account. Data touched: the number dialed, the operator's own number, and call metadata.
- Cloudflare, Inc. Turnstile (USA) - bot check on the client contract-signing page. Data touched: the challenge response and the signer's IP address.
Providers you connect yourself
Some parts of the Service run on accounts that belong to the customer rather than to us. These are not our subprocessors: data flows to them on the customer's instruction and under the customer's own agreement with that provider.
- Your email inboxes, whether Google Workspace, Microsoft 365, or any SMTP host. All outreach sends from your own inboxes and your own credentials; we never send customer outreach from a shared or bulk service.
- Any drafting, research, or data-source API key you connect yourself, which is used with your account and billed to you.
- Your own Stripe account, where you invoice and collect payment from your own clients. You are the merchant of record for those transactions.
Data sources are not subprocessors
The Service can retrieve publicly available business information from third-party business-data providers. We send those providers search criteria such as a city and a business category; we do not send them Customer Data or personal data about our customers or their contacts. Because nothing of ours is processed on our behalf, those providers are recipients of a query rather than subprocessors of personal data, and are not listed above. The information they return becomes Customer Data in the customer's workspace once retrieved, and the customer is the controller of it from that point.
Questions and changes
Questions about this list, or notice of objection to a provider: sebastien@beyondtheedgestudio.com. Sebastien Vautier, trading as Beyond the Edge Studio, 4375 N Las Vegas Blvd, Suite 7, PMB 5028, Las Vegas, NV 89115, USA.