Loading…
Effective date: September 15, 2026
This table describes the third-party services used to provide the Service, their purposes, and the data they process. It includes customer-enabled integrations, which are explained below.
| Sub-processor | Contracting entity | Processing region | Purpose | Data processed |
|---|---|---|---|---|
| Vercel | Vercel Inc. | United States — serverless compute and application data; static assets are served from Vercel’s global edge network | Application hosting / serverless compute + product analytics | All application data in transit; aggregate usage/page-view analytics |
| MongoDB Atlas | MongoDB, Inc. | United States | Primary database (system of record for all application data) | Application data at rest — account, business records, customer PII; application-layer encryption is used for selected identity fields |
| Stripe | Stripe, Inc. | United States | Payment processing (subscriptions + Connect) | Billing contact + payment details (card data tokenized by Stripe; never stored by ThothOS) |
| Anthropic | Anthropic PBC | United States | AI/LLM provider for in-app AI features | Prompt / conversation content submitted to AI features |
| Mailgun | Mailgun Technologies, Inc. (a Sinch company) | United States | Transactional & customer-facing email delivery | Recipient email addresses + email message content |
| Twilio | Twilio Inc. | United States | SMS phone-number verification (Twilio Verify) | Phone numbers + one-time SMS verification codes |
| Cloudflare (R2 + Images) | Cloudflare, Inc. | United States — R2 archive bucket; uploaded images are delivered from Cloudflare’s global CDN edge | Audit-log archive storage + tenant image hosting/CDN; account/DNS management via the Cloudflare API | Audit-log archive files (R2) + uploaded images (Images/CDN); no customer personal data on the account-management API path |
| Google LLC | United States account region; Google Fonts and embedded YouTube players are served from Google’s global edge, so a visitor’s IP reaches the nearest node | Google Analytics (marketing + portals when GA ID configured), Google Calendar sync (customer-enabled OAuth), Google Fonts on tenant storefronts, and embedded YouTube players | Page-view / usage analytics; calendar event titles and attendee metadata when connected; visitor IP address and user-agent whenever a page loads a Google-hosted font or an embedded YouTube player | |
| Microsoft | Microsoft Corporation | United States | Outlook / Microsoft 365 calendar sync (customer-enabled OAuth) via Microsoft Graph | Calendar event titles and attendee metadata when connected |
| Zoom | Zoom Communications, Inc. | United States | Video meeting creation for bookings and scheduled meetings, through the ThothOS platform’s own Zoom account | Meeting topic, start time and duration, and the invited attendees’ names and email addresses |
| Vimeo | Vimeo.com, Inc. | United States; player assets are served from a global edge, so a visitor’s IP reaches the nearest node | Embedded Vimeo video players on tenant storefront pages | Visitor IP address and user-agent whenever a page loads an embedded Vimeo player |
| IndexNow | Microsoft Corporation, operator of the shared IndexNow endpoint | Global — the shared endpoint forwards submitted URLs to participating search engines | Search-engine recrawl notification (shared IndexNow endpoint, which forwards to participating search engines) | Public page URLs submitted for recrawl — no personal data |
| Apple | Apple Inc. | United States | Apple Calendar connect (customer-enabled OAuth; connect-only) | Calendar account identity tokens when connected |
| Intuit QuickBooks | Intuit Inc. | United States | QuickBooks Online accounting sync (customer-enabled OAuth) | Customer names/refs + invoice line descriptions when connected |
ThothOS configures no non-US storage region for any sub-processor. Where a row names a global edge network, that is delivery of public assets — a font file, a video frame, an image — and the data reaching it is the visitor’s IP address and user-agent, not your business records. See the residency clause in our DPA.
We will give you at least 30 days’ notice before a new sub-processor begins processing your data, by updating our Sub-processor page and notifying the billing contact on your account. You may object on reasonable data-protection grounds during that period; if we cannot resolve your objection, you may terminate the affected part of the Service and receive a pro-rata refund of prepaid fees for the unused term.
Google, Microsoft, Apple, and Intuit QuickBooks (listed above) process data only when a customer explicitly connects them or configures a measurement ID. Calendar and QBO sync are off unless enabled; Google Analytics loads only when a measurement ID is present.
See our DPA and Privacy Policy.