Trust & Legal

Subprocessor List

Providers CleanIQ uses to deliver the service, subject to their own security and privacy terms.

Last updated: July 29, 2026

DigitalOcean

Application hosting, networking, runtime logs, and deployment operations. Data involved may include application traffic, account identifiers, request metadata, and encrypted service data.

Supabase

Managed Postgres infrastructure for account, organization, connection, scan, finding, billing, audit, support, and Calia operational records.

Stripe

Checkout, recurring billing, refunds, invoices, and customer portal. Stripe receives payment and billing information; CleanIQ receives identifiers and subscription or payment status.

Resend

Transactional email delivery, such as scan reports, security, support, and account messages. Data includes recipient address, message content, and delivery status.

OpenAI

Calia assistant inference and structured proposed actions. CleanIQ sends limited, credential-free context and requests store: false.

Google

Optional Google sign-in. Google provides identity details authorized by the user, such as email, name, picture, and authentication result.

Customer-directed CRM providers

GoHighLevel, HubSpot, Pipedrive, and any future customer-selected CRM are integrations the customer instructs CleanIQ to access. Their own terms govern the CRM account. They are not CleanIQ subprocessors merely because a customer connects them.

Changes

CleanIQ may update this list as providers change. Material changes will be posted here and, where required, communicated through the service or email.