Every company that processes personal data or client data on our behalf, what it does and where.
These are the companies that process personal data or client data on behalf of inseeq UG (haftungsbeschränkt) to deliver our services. Each is bound by a data processing agreement that obliges it to process data only on our instructions, keep it confidential and secure it. Transfers outside the EEA rely on the EU-US Data Privacy Framework where the recipient is certified, otherwise on the European Commission's Standard Contractual Clauses.
We announce changes to this list to clients 30 days before a new subprocessor starts processing client data. A data processing agreement is available on request from legal@inseeq.com.
The platforms a client connects (Google, Meta, LinkedIn, HubSpot) are not on this list: they are the client's own providers, not ours. How we handle personal data overall is set out in our privacy policy.
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Vercel Inc. | Hosting and compute for the inseeq platform, the MCP server, the reporting warehouse's data jobs and isolated environments for scheduled analysis runs; hosting for inseeq.com | All platform and client data, in processing | United States (compute region Washington, D.C.); website served from the EU edge |
| Supabase, Inc. | Managed PostgreSQL databases: the platform database, the reporting warehouse and our internal records archive | All platform and client data, at rest | Reporting warehouse: EU (Frankfurt). Platform database: United States (N. Virginia). Internal archive: EU (Frankfurt) |
| Railway Corp. | Hosting for the communications-archive engine (hourly Slack, CRM and email sync into the internal archive) | Client communications content, in processing; archive access credentials in service configuration | United States |
| Inngest, Inc. | Scheduling and running background jobs | Job payloads: identifiers, task and comment text, notification content | United States |
The inseeq platform calls these models through their APIs, for inference only, under commercial terms that prohibit training on the data it sends.
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Anthropic, PBC | Claude models: inseeq's Slack assistant; scheduled analysis and report runs | Client data needed for the task, including data from connected platforms | United States |
| OpenAI, L.L.C. | Measuring brand presence in AI search answers; drafting content | Search prompts, brand and competitor names, content briefs; no connected-platform data | United States |
| OpenRouter, Inc. | Routing AI-search measurements and drafting tasks to several model providers | As for OpenAI; no connected-platform data | United States |
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Nango, Inc. | Credential vault and connection flow for platforms clients connect by sign-in or key (planned, not yet in use) | Access tokens and keys; connection metadata (which account, who connected) | United States |
| Index Commerce GmbH (superglue) | Retrieves LinkedIn advertising data for clients connected before our own LinkedIn application is approved | LinkedIn advertising account, campaign and performance data; access credentials | Germany; its hosting (Amazon Web Services) EU and United States |
| AgileBits Inc. (1Password) | Staff password and secret management, including access keys clients have given us | Access credentials | United States |
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Resend (Plus Five Five, Inc.) | Sending notification and invitation emails | Recipient name and email, notification content | United States |
| Slack Technologies, LLC | Shared channels with clients; inseeq's Slack assistant | Messages and files exchanged in shared channels | United States |
| Linear Orbit, Inc. | Project and task management behind the client portal's project boards | Task titles, descriptions, comments, assignees | United States |
| Attio Ltd | Customer relationship management: client contacts, website enquiries, call notes and transcripts | Business contact details, notes, call recordings and transcripts | EU (Belgium) and United States, on Google Cloud |
| Google LLC / Google Ireland Ltd | Google Workspace (email, documents); Google Cloud (the service identity that reads data clients share with us) | Email and documents exchanged with clients; credentials metadata | EU and United States |
| Paid.ai | Per-client usage and cost analytics for our services | Client identifiers and usage/cost metrics (no communications or platform content) | United States |
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Turnstile spam protection on forms | IP address, browser signals | United States / global |
| Contentful GmbH | Website content management | No personal data of visitors | EU and United States |
| Google LLC | Google Analytics (with consent), Google Fonts | IP address, usage data | United States |
Used on clients' behalf; we send them only business information such as domains, keywords and brand names.
| Service | Purpose |
|---|---|
| DataForSEO | Keyword and search-volume data |
| Peec AI | AI-search visibility tracking |