The short version
- Four providers see data as a matter of course: Render (hosting, US), Anthropic (AI, US), Resend (email, US) and Cloudflare R2 (uploaded files, Asia-Pacific).
- Google sign-in and HubSpot CRM import are optional. Public company research also sends company-name queries to Google News; it sends no account or assessment data.
- We will email account holders at least 14 days before adding a provider that would receive personal data.
Always involved
| Provider | What it does for us | What reaches it | Where |
|---|---|---|---|
| Render (Render Services, Inc.) | Runs the application servers and the Postgres database. | Everything: accounts, assessments, documents' metadata, workspace records, logs. | United States, Oregon region |
| Anthropic, PBC | Provides the Claude models that write report prose, propose extractions from uploaded documents, answer Command Center and ask-box questions, draft regulatory mappings and propose public NBFC, manufacturing and diagnostics business observations for human review. | Assessment answers and free text, uploaded document text, chat questions with relevant workspace context, and filtered public company text for active-watchlist research. Recognised personal-contact lines, emails and phone numbers are removed from that public research text. Patient reports and registry contact columns are excluded from public research inference. Not your login details. Anthropic's API terms exclude training on customer data. | United States |
| Resend, Inc. | Sends every email we send. | Your email address, your name if we have it, and the content of the email (sign-in link, report, deletion notice, newsletter). | United States |
| Cloudflare, Inc. (R2) | Holds the raw files uploaded as evidence: policies, minutes, registers, scans. | The file itself, under an opaque key. Not who uploaded it or what was extracted from it; that stays in the database. | Asia-Pacific region (the bucket's location setting) |
Only if you turn it on
| Provider | Triggered by | What reaches it | Where |
|---|---|---|---|
| Google LLC | Choosing "Continue with Google". | Google tells us your name, email and picture; we tell Google nothing beyond the sign-in itself. | Global |
| HubSpot, Inc. | An organisation admin choosing "Connect a CRM". | We read company and deal records once, then revoke our own access. Nothing is written to HubSpot. | United States / EU, per your HubSpot account |
Not sub-processors, but you may wonder
| Who | Why they are not on the list above |
|---|---|
| GitHub | Holds our source code. No customer or personal data lives in the repository. |
| Reserve Bank of India and other regulator websites | We fetch public circulars and RBI releases daily and the RBI company register weekly. Requests include the public URL, our server network address and a research user-agent. No customer account or assessment data is sent. |
| Google News (Google LLC) | Free RSS searches receive public company names and sector keywords, our server network address and a research user-agent. They do not receive assessment answers, rep-entered contacts or customer account details. No paid news API is connected. |
| Company websites | We read public company homepages, footer links, grievance and privacy pages on a quarterly cycle or when a lead needs a new check. These servers receive the public page URL, our network address and a research user-agent. Officer names/contact details are not saved as observations, and raw pages are not retained. |
| Apple public app feeds | When an Apple app ID is configured for company research, Apple receives that public app ID, its country, our network address and a research user-agent. We read listing descriptions and turn at most 50 recent review entries into deterministic theme counts. Raw review text and reviewer identities are neither retained nor sent to Claude. Google Play is not connected. |
| Configured public publishers and company/vendor pages | Curated public HTML/PDF URLs may be fetched for CRISIL, ICRA, CARE, India Ratings, CERT-In, BSE/NSE, company careers pages and vendor customer pages. Publishers receive the public URL, our network address and a research user-agent. Filtered business text can go to Claude for active-company proposals, all pending human review; raw documents are not retained. Job-board scraping and paid document APIs are disabled. |
| NABL/QCI, ABDM/NHPR, CDSCO and public health-scheme registers | Configured public medical-laboratory, facility, device, clinical-establishment and PMJAY/insurer empanelment exports support corporate directory checks. These websites receive the public URL, our network address and research user-agent. Only corporate identifiers, city, scope and dated membership evidence are retained; no patient records or individual contact columns. Unreadable or incomplete lists cannot establish absence. |
| SEBI, ministry PLI portals, FDA and industry/partner publishers | Configured public offer filings, PLI beneficiary lists, FDA warning letters or published inspection observations, industry programme lists and corporate portfolio/client/member pages support manufacturing and diagnostics research. They receive the public page URL, our network address and research user-agent, with no account or assessment data. Filtered business passages can go to Claude for active-company proposals; public registry rows are parsed deterministically and raw documents are not retained. |
| Your own HRIS, Active Directory or webhook endpoint | These are your systems, connected on your instruction; data flows from them to us, or from us to a URL you chose. |
No paid MCA document vendor or paid news/review API is connected to Leads. Curated publisher URLs, complete sector-directory exports and Apple app IDs must be configured before their scheduled fetches run; the admin coverage panel reports missing configuration and degraded fetches. Public official landing pages may be checked manually to verify availability. Adding a fetcher changes this page and the Privacy Notice in the same release. Paid document access also requires a displayed price and a rep's acceptance for a qualified lead that has reached contacted stage.
Two locations, on purpose
Everything in the database is in the United States (Render, Oregon). Uploaded files are the exception: the R2 bucket that holds them is set to Cloudflare's Asia-Pacific region, so a document you upload does not leave the region. If your organisation needs the database in India as well, see the residency note on the Privacy Notice.Changes to this list
Adding a provider that would receive personal data: email to account holders at least 14 days before, with the right to delete your account before the change. Removing one, or a change that affects nobody's data: the date at the top of this page moves and nothing else happens.
Questions about anything on this page: klaritiq@gmail.com. We write these pages ourselves, in plain language, to match what the product actually does; they are not a substitute for legal advice to you.