Legal · Sub-processors

Who touches the data, by name.

SignalCore (Atlantis LLC) uses the vendors below to operate the service. Each processes data only under contract, only for the purpose listed. This is the maintained list referenced by our Data Processing Agreement (§5) and Privacy Policy (§9). We give clients 30 days' notice before adding or replacing a sub-processor; clients may object on reasonable data-protection grounds.

Last updated: July 7, 2026

Sub-processor Purpose Data shared Location
Cloudflare, Inc. Hosting, storage (Workers / D1 / KV / Analytics Engine / Queues / R2), CDN All service data Global edge (US-controlled)
IPinfo (IPinfo.io) IP classification (bot / datacenter / ISP filtering) and company lookup Visitor IP (transient, consent-gated) US
Apollo.io Company firmographic enrichment Company domain / name derived from IP (consent-gated) US
ipregistry / The Companies API IP-to-company and firmographic enrichment (secondary sources) Visitor IP (transient, consent-gated) / company domain US / EU
Resend, Inc. Transactional email (reports, alerts) Report contents, recipient email (client's own staff) US
Stripe, Inc. Payments and billing Client billing details (never visitor data) US
ntfy.sh Push notifications to the client's devices Alert text (company name, score) EU / US
Meta Platforms / CRM vendors / Slack / Microsoft Teams Client-configured destinations — only active if the client connects them Hashed email, event metadata Per vendor

Notes: enrichment vendors receive a visitor IP transiently and only after consent (the client's cookie banner) — never browsing behavior. The "client-configured destinations" row only activates when a client connects their own CRM, ad, or chat accounts; we push to their accounts on their instruction. We do not sell data to anyone on this list or otherwise.

Get change notices

One email when this list changes, 30 days before the change takes effect. Nothing else, ever.