Third-Party Subprocessors Directory
Authorized infrastructure partners and service providers that process customer data on behalf of SalesChat.
Vetted for Enterprise Privacy & Zero Public Model Training
In accordance with Article 28 of the General Data Protection Regulation (GDPR) and global data privacy standards, all third-party subprocessors engaged by SalesChat are contractually bound by rigorous Data Processing Addendums (DPAs). We mandate that AI inference vendors adhere to strict zero-training and transient processing agreements.
1. Authorized Infrastructure & AI Subprocessors
The following entities provide hosting, computing, database persistence, and AI inference services necessary to deliver the SalesChat platform:
| Subprocessor | Role & Purpose | Data Processed | Entity Location | Transfer Safeguards |
|---|---|---|---|---|
| Supabase Inc. | Primary Cloud Database, User Authentication & Session Management | User profile credentials, organization memberships, simulation conversation transcripts, rep evaluation scores, and audit logs. | United States (AWS) | Data Processing Addendum (DPA) with Standard Contractual Clauses (SCCs) |
| Groq Inc. | Ultra-Low Latency AI Inference Engine (LPU) | Simulation roleplay messages, buyer persona guidelines, objection scenario parameters, and generated prospect replies. | United States | Enterprise DPA with Zero-Training & Ephemeral Retention Commitments |
| TypeSafe AI Inc. | Automated Evaluation & Scoring Decision Engine (Jev) | Simulation dialogue turns, objection handling performance metrics, and automated coaching recommendations. | United States | DPA with Standard Contractual Clauses (SCCs) |
| Upstash Inc. | Serverless Redis Caching & Distributed Rate Limiting | Distributed rate limit counters, tenant concurrency locks, and ephemeral API cache entries. | United States | DPA with Standard Contractual Clauses (SCCs) |
| Vercel Inc. | Cloud Web Hosting, Edge CDN & Serverless Compute Runtime | HTTP request routing metadata, IP addresses (for security verification and DDoS mitigation), edge execution logs, and static asset distribution. | United States / Global Edge Network | DPA with Standard Contractual Clauses (SCCs) |
2. Vendor Due Diligence & Security Standards
Before onboarding any third-party subprocessor, SalesChat conducts rigorous technical and legal evaluations, verifying:
- Security Certifications: Verification of independent SOC 2 Type II audits, ISO/IEC 27001 certifications, or equivalent enterprise security attestations.
- Data Segregation & Encryption: Enforced encryption of data both in transit (TLS 1.3) and at rest (AES-256).
- AI Training Restrictions: Explicit legal commitments ensuring prompt data and model completions are not retained or utilized to train external public foundation models.
3. Subprocessor Updates & Notification Procedures
As SalesChat develops new capabilities, we may engage additional subprocessors or migrate existing services. We maintain a transparent change management process:
4. Privacy & Subprocessor Inquiries
To request an enterprise Data Processing Addendum (DPA) or submit questions regarding our subprocessor compliance policies, please contact our privacy compliance team at privacy@chat2sell.in or review our full Privacy Policy.