Sub-processors
Alignify uses the providers below to run the service. They process data on our behalf, under contract, only as needed to provide the service. This list forms part of the Data Processing Agreement at /dpa (section 6).
Where your data is: your workspace data, including the CRM data synced from HubSpot, is stored and processed in the United States (Railway, region US-West (United States)).
Changes: we give at least 30 days' notice before adding or replacing a sub-processor, by updating this page and emailing workspace owners and admins. You can object within that time at contact@alignifytech.com (DPA section 7).
HubSpot is not on this list: it is your own CRM, which you connect, and its use is governed by your agreement with HubSpot.
| Sub-processor | Purpose | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Railway Corporation | Hosting: application servers, database, cache and job queues | All Service data, including CRM data synced from HubSpot, agent runs and account data | United States (US-West) | Standard Contractual Clauses (module 3) in the Railway DPA |
| OpenAI OpCo, LLC | AI analysis of the CRM records an agent runs on (primary AI provider) | Content of the CRM records sent to an agent run; prompts and AI outputs | United States | Standard Contractual Clauses (module 3) in the OpenAI DPA |
| Clerk, Inc. | Sign-in and account identity | Name, email address, sign-in identifiers and session data of users | United States | Standard Contractual Clauses (module 3) in the Clerk DPA |
| Lettermint B.V. | Transactional and notification email | Recipient email address and message content (may name CRM records in a summary) | European Union (Netherlands) | Not needed: processed in the EU (Lettermint DPA) |
| Functional Software, Inc. (Sentry) | Error monitoring | Diagnostic events, scrubbed of secrets and personal data before they are sent | European Union (Germany) | Stored in the EU; EU-US Data Privacy Framework and Standard Contractual Clauses (module 3) for any access from the United States |
| Paddle.com Market Ltd | Online payments as our reseller and Merchant of Record (an independent controller of payment data) | Billing name, email, billing address, payment and transaction data | United Kingdom (with processing in the United States) | UK adequacy decision; Paddle data processing terms |
| Google Ireland Limited / Google LLC (Google Analytics 4) | Product usage analytics, only if the user selects "Allow analytics" | Pseudonymous identifier, pages viewed and product events; no name, email or CRM data | Ireland and United States | EU-US Data Privacy Framework and Standard Contractual Clauses |