Trust
Sub-processors
Last updated 10 October 2026
These are the companies that process customer data on Kairoq's behalf in providing Kairoq, as described in the Data Processing Addendum. Each is bound by a written agreement with data protection terms no less protective than ours. We tell administrators by email at least 30 days before adding or replacing one, and you may object (see the addendum). Version 2026-10-10.Transfers. Where a provider processes personal data of people in the EU, EEA, UK or Switzerland outside those regions (the United States, India or elsewhere), the transfer is covered by the European Commission's standard contractual clauses (Module 3 with each of us as processor), the UK Addendum and Swiss amendments, or, where the provider is certified, the EU-US Data Privacy Framework and its UK and Swiss extensions. Ask us for a copy of the safeguards for any provider.
1. Used for every workspace
| Company | What it does for us | What it sees | Where |
|---|---|---|---|
| Supabase | Database, sign-in (authentication) and file storage | All workspace content and account data | India (Mumbai) |
| Amazon Web Services | Servers that run the application | Everything the application handles while serving a request | India (Mumbai) |
| Cloudflare | Network protection, caching of public pages, bot checks on sign-up and public forms | IP addresses and request metadata; form submissions in transit | Global network |
| Razorpay | Subscription payments | Billing contact, plan and payment status; card details are entered with Razorpay and never reach us | India |
| Our email delivery provider (for example Resend, or an SMTP service) | Delivers the emails the service sends: invitations, notifications, reminders, and email you send from the app | Recipient addresses, subject and message body | As configured for the deployment |
2. Used by AI features
Only when AI features are on for your workspace. None of these is permitted to use your data to train models.
| Company | What it does for us | What it sees | Where |
|---|---|---|---|
| Anthropic (default) or the model provider configured for the deployment, such as Google (Gemini), Groq or another OpenAI-compatible provider | Answers AI requests: research briefs, scores, summaries, drafts, forecasts, the assistant | The content of the request, limited to what the feature needs; not used to train models | Provider's regions (typically the United States) |
| Voyage AI | Turns text into embeddings so search and the AI agent can find relevant notes, emails and transcripts | Text from notes, activities, emails and transcripts the person is allowed to see | United States |
| Deepgram | Transcribes call recordings you upload | The recording and its transcript | United States |
3. Used only if switched on
| Company | What it does for us | What it sees | Where |
|---|---|---|---|
| Brave Search | Finds recent public news when account research is switched on | Company names only: no person names, no CRM content | United States |
| Sentry (or a compatible service) | Error reports, when configured | Error type, trimmed message, stack trace, route, organization and user ids; never bodies, headers or query strings | As configured |
4. Tools your organization connects
These are your own accounts with other companies. They receive or provide data only when your organization connects them, and under your agreement with them, not as our sub-processors.
| Company | What it does for us | What it sees | Where |
|---|---|---|---|
| Google (Gmail, Calendar, Meet) | Calendar events and meeting links; read-only email logging | What the person who connects it chooses to allow | Global |
| Microsoft (Outlook, Teams, Microsoft 365) | Calendar, Teams meetings and transcripts, optional read-only mail | What the person or administrator who connects it grants | Global |
| Zoom | Meetings and transcripts | Meeting details and transcripts of the connecting person's meetings | Global |
| Slack | Messages from channels an administrator maps to a company or deal | Messages in mapped channels only | Global |
| Meta (WhatsApp Business Cloud API) | WhatsApp conversations with your leads and contacts | Messages to and from your WhatsApp Business number | Global |
5. Public data sources
Account research can look up a company in public registers (GLEIF, Wikidata, Wikimedia, and India's open government data) using the company's name or website. No personal data from your workspace is sent.
Kairoq