Subprocessors
Vendors Bitscaled may use to host, deliver, secure, or measure services, including optional and environment-gated providers. Clients may object to material additions used for processor services.
Version: SUBPROCESSORS-v1.0 • Effective Date: August 17, 2026
1. About this list
Bitscaled LLC publishes the vendors that may process data in connection with our websites, portals, VaultTools, and contracted processor services. This page wraps our current inventory. It should be read with the Data Processing Agreement and Privacy Policy.
Core vendors are used in ordinary provision of the website or processor services. Optional vendors are environment-gated or used only when a product, integration, consent category, or client contract is enabled.
2. Current subprocessors
| Vendor | Role | Purpose | Location | When used |
|---|---|---|---|---|
| Vercel Inc. | Hosting | Website, application hosting, edge delivery, and cookieless Web Analytics / Speed Insights. | United States | Core |
| Supabase / PostgreSQL provider | Hosting | Primary application database for accounts, CRM, billing, tickets, and legal signatures. | United States | Core |
| MongoDB (content database) | Hosting | Article content and public newsletter subscriber records. | United States | Core |
| Upstash Redis | Hosting | Optional queue, cache, and rate-limit storage when configured. | United States | Optional |
| Twilio SendGrid | Communications | Transactional and marketing email delivery, event webhooks, and inbound parse when SendGrid is the configured provider. | United States | Core |
| Google LLC (reCAPTCHA, optional Maps, optional Gemini) | Security | Bot protection on public forms (contact, login, invite accept, VaultSandbox spoof-test); intranet address lookup; optional Gemini draft/image features. | United States | Core |
| Google Analytics 4 | Analytics | Public-site usage measurement after analytics cookie consent. | United States | Optional |
| Datadog, Inc. | Analytics | Application monitoring. Browser RUM and session replay on public pages require analytics consent. | United States | Optional |
| PayPal | Payments | Workspace invoice checkout when a client pays an invoice online. | United States | Optional |
| Microsoft (Microsoft 365 / Graph, optional Entra app) | Productivity | Optional Microsoft 365 security snapshot and contracted Microsoft 365 administration. | United States / customer tenant | Optional |
| Zoom | Communications | Optional CRM meeting/phone sync for Bitscaled operations, not public marketing pages. | United States | Optional |
| Discord | Operations | Optional internal CRM notifications, approval workflows, and Workspace client channels when configured. | United States | Optional |
| SignalWire | Communications | Voice/SMS call flows for contracted clients that use Bitscaled-managed telephony. | United States | Optional |
| Namecheap VPS / Bitscaled VaultTools host | Hosting | Public security tools gateway (vaulttools.bitscaled.tech) and related microservices. | United States | Core |
| VaultSandbox (email spoof test environment) | Security | Authorized SMTP spoof testing for domains the requester is allowed to test. | United States | Optional |
| Have I Been Pwned / XposedOrNot | Security | Breach-exposure lookups for emails or domains submitted to VaultTools. | United States / provider regions | Optional |
| Apollo, Clay, Lusha, Parallel | Operations | Optional B2B CRM enrichment and optional article-automation validation for Bitscaled operations (not Client end-user files unless an SOW says otherwise). | United States | Optional |
| Resend | Communications | Optional transactional and marketing email when configured as an alternative or companion to SendGrid. | United States | Optional |
| OpenAI, LLC | Operations | Optional Workspace and Intranet AI model provider when configured. | United States | Optional |
| Anthropic | Operations | Optional Workspace and Intranet AI model provider when configured. | United States | Optional |
| Google Workspace eSignature | Productivity | Optional e-sign of MSA, NDA, SOW, BAA, and DPA when configured for a client. | United States | Optional |
3. Optional and environment-gated vendors
Optional rows are not "always on." Examples include Redis or queue storage when configured, Google Analytics and Datadog RUM after analytics consent, PayPal checkout when a client pays an invoice online, Microsoft Graph snapshots, Zoom or Discord for Bitscaled operations, SignalWire for contracted telephony, VaultSandbox spoof testing, and breach-lookup providers used by VaultTools.
Vendors currently marked Optional: Upstash Redis; Google Analytics 4; Datadog, Inc.; PayPal; Microsoft (Microsoft 365 / Graph, optional Entra app); Zoom; Discord; SignalWire; VaultSandbox (email spoof test environment); Have I Been Pwned / XposedOrNot; Apollo, Clay, Lusha, Parallel; Resend; OpenAI, LLC; Anthropic; Google Workspace eSignature.
4. CRM enrichment vendors
Apollo, Clay, Lusha, and Parallel are used for Bitscaled CRM enrichment of Bitscaled business contacts. They are not used to process the Client's end-user files or customer records as a processor under the DPA unless a signed SOW expressly says otherwise.
5. How to object
If you are a Client whose Client Data we process under the DPA, you may object to a material new subprocessor used for those processor services by emailing legal@bitscaled.tech. Include your organization name, the vendor, and the reason. We will discuss a commercially reasonable alternative as described in the DPA.
6. Updates
We update this page when the inventory changes. The version and effective date on this document identify the published list. Check back here rather than relying on an emailed copy unless your MSA requires a different notice method.
7. Contact
Questions: legal@bitscaled.tech or privacy@bitscaled.tech.
Explore our other legal documents
Related policies that explain how we operate, protect your data, and provide our services transparently.
Privacy Policy
How we handle website, account, newsletter, VaultTools, and managed-service data.
Read Privacy PolicyTerms of Service
The rules for using our website, client portal, public tools, and managed services.
Read Terms of ServiceAcceptable Use Policy
What you may and may not do on our website, Client Workspace, public tools, and managed environments.
Read Acceptable Use PolicyCookies Policy
Named cookies, localStorage consent, and how to change analytics preferences.
Read Cookies PolicyData Processing Agreement
Processor terms for Client Data in managed services and hosted Workspace content.
Read Data Processing AgreementSubprocessors
Vendors that may process Website Data or Client Data, including optional tools.
Read SubprocessorsDMCA Policy
Copyright notices, counter-notices, and designated agent contact.
Read DMCA PolicyVulnerability Disclosure
How to report security issues in Bitscaled-operated systems in good faith.
Read Vulnerability DisclosureSecurity & Compliance
These documents explain how we handle privacy, terms, cookies, data processing, and acceptable use without implying certifications outside the written policies.
Questions About Our Legal Policies?
If you have questions about any of our legal documents or need clarification on our policies, our legal team is here to help.