Recavo Labs — Subprocessor List
Authoritative list of third-party subprocessors that process customer personal data on Recavo’s behalf. Referenced by the DPA, the Privacy Policy (third-party disclosures), and the Cookie Policy.
Data residency: Recavo has no regulatory data-localization mandate, so US residency is a preference, not a contractual guarantee: we select a US region wherever a vendor offers it at no extra cost. Exceptions where processing is genuinely global: Cloudflare (proxy mode on a non-Enterprise plan — traffic transits Cloudflare’s global anycast edge).
Last updated: 2026-07-24
Subprocessors
| # | Service | Legal Entity | Purpose | Personal Data Processed | Region |
|---|---|---|---|---|---|
| 1 | Neon | Neon, LLC (affiliate of Databricks, Inc.) | Primary application database (Postgres) | All CRM data: accounts, contacts, deals, notes | US |
| 2 | Neon Auth | Neon, LLC (Neon Auth; affiliate of Databricks, Inc.; underlying tech Stack Auth) | Authentication & identity (email/password, Google OAuth) | Email, password hash, OAuth identity, session tokens | US |
| 3 | Google Cloud Platform | Google LLC | Application hosting (Cloud Run), secrets, server-side logging/monitoring | All data in transit & at rest; app + infra logs | US (us-central1) |
| 4 | Fireworks AI | Fireworks.ai, Inc. | LLM inference & Whisper speech-to-text (via self-hosted LiteLLM proxy) | AI Brief inputs; voice recordings → transcripts | US |
| 5 | Tavily | AlphaAI Technologies Inc. (dba Tavily) | Web search for AI Brief | Search queries (may include prospect/company names) | US |
| 6 | Firecrawl | SideGuide Technologies, Inc. (dba Firecrawl) | URL scraping for AI Brief | Target URLs (prospect company sites) | US |
| 7 | Stripe | Stripe, LLC (account services) & Stripe Payments Company (payment processing) | Subscription billing & payments | Name, email, payment method, billing address | US |
| 8 | Postmark | AC PM LLC (dba Postmark; an ActiveCampaign company, fka Wildbit, LLC) | Transactional & inbound email (Email Drop Box) | Recipient emails, email body & attachments | US |
| 9 | Inngest | Inngest, Inc. | Background job orchestration | Event payloads (user/record identifiers) | US |
| 10 | Google Maps Platform | Google LLC | Geocoding, Places, My Day Routing | Addresses, location queries | US |
| 11 | Upstash | Upstash, Inc. | Redis rate limiting | Client IP addresses | US |
| 12 | Sentry | Functional Software, Inc. (dba Sentry) | Error monitoring, diagnostics, performance (Web Vitals) & masked error-only session replay (marketing site) | App: stack traces, user IDs, emails, IP, request context. Marketing site: stack traces, page URL, browser/device, Web Vitals, and a masked session replay (buffered in the browser; typically uploaded only if an error occurs) — sendDefaultPii: false |
US |
| 13 | Grafana Cloud | Raintank, Inc. (dba Grafana Labs) | Metrics, logs & traces observability | Aggregate metrics; PII in logs/traces if not scrubbed | US |
| 14 | Google Analytics (GA4) | Google LLC | Client-side product/web analytics | Page views, events, cookies/device identifiers, IP | US |
| 15 | Cloudflare | Cloudflare, Inc. | Domain registration, authoritative DNS, and reverse proxy / TLS termination in front of Cloud Run (proxy mode) | End-user IP addresses, request headers & URLs (all inbound traffic) | Global edge (non-Enterprise) |
Notes & compliance controls
- Google Cloud Monitoring / Logging (server-side telemetry) is not a separate subprocessor — it is part of Google Cloud Platform (row 3).
- Cookie consent (GA4, row 14): GA4 sets non-essential cookies and MUST be gated behind prior opt-in consent (GDPR/ePrivacy). The GA4 tag does not fire until the user accepts.
- PII scrubbing (rows 12–13): Sentry configured with
sendDefaultPii: false+ server-side scrubbing; logs scrubbed of PII before export to Grafana Cloud. - Sentry on the marketing site (row 12): On recavolabs.com, Sentry is consent-gated — it loads only after the visitor opts in to analytics (same gate as GA4, row 14) — and its session replay is masked (all text, form inputs, and media hidden) and buffered in the visitor’s browser — it is typically transmitted to Sentry only when an error occurs, and ordinary sessions are generally not uploaded.
- Cloudflare (row 15): In proxy mode (“orange cloud”), Cloudflare terminates TLS and sees all inbound end-user traffic (IPs, headers, URLs) — this makes it a subprocessor, not merely a registrar. On a non-Enterprise plan, traffic transits Cloudflare’s global anycast edge and cannot be pinned to the US.
- Not subprocessors (internal tooling, no customer data): GitHub, Linear, Notion, Docker.
Related documents: Privacy Policy · Terms of Service · Cookie Policy · Data Processing Agreement