Subprocessors
Last updated: September 10, 2026
Companies that process personal data on our behalf to run LeadScore. We share only the minimum necessary data. Our DPA incorporates this list; we email customers 30 days before adding a new subprocessor.
| Vendor | Purpose | Data | Location |
|---|---|---|---|
| Groq | AI scoring, classification, summaries | Form field data only | United States (Groq DPA) |
| OpenRouter | Fallback AI scoring, classification, summaries | Form field data only | United States (OpenRouter DPA) |
| Brevo | Transactional email (lead forwarding, trial reminders) | Recipient email + message content | EU |
| Dodo Payments | Subscription billing | Email, name, plan; card data stays with Dodo | See Dodo DPA |
| Cloudflare | Hosting, DNS, D1 database, Turnstile, security logs | All service data at rest + IP/edge logs | Global edge; DPA available |
| PostHog | Product analytics (consent-gated) | Page views, feature usage; no form contents | United States (DPA available) |
| Google OAuth | Sign-in (only method) | Name, email, profile photo | United States |