Legal — Subprocessors

The third parties we process data with

When ScaleBridger processes personal data on your behalf, these are the providers that may be involved — each named with its purpose and the categories of data it handles. This is the sub-processor list our Data Processing Agreement refers to.

Version v0.1
Last updated July 6, 2026
Governing law Texas, USA

This page lists the third parties ScaleBridger may engage to process personal data on a client’s behalf when providing the Services. It is the sub-processor list referenced by our Data Processing Agreement, and it names only providers ScaleBridger actually uses.

Many engagements also run on platforms and accounts that the client itself owns or is required to hold — for example, its own CRM, payment processor, hosting, booking, or property-management accounts. Those are the client’s own arrangements under the providers’ own terms and are not sub-processors engaged by ScaleBridger.

Current sub-processors
01

GoHighLevel / LeadConnector

CRM & messaging platform
Purpose

Store and manage leads, contacts, pipeline and opportunity records, and send email, SMS, and other messages for a client engagement.

Data types

Contact identifiers (name, business name, email, phone), inquiry and message content, lead and opportunity records, communication history.

Location

United States

02

Stripe

Payment processing
Purpose

Process payments and checkout for audits and services and maintain billing and transaction records.

Data types

Name, email, billing details, payment metadata, and transaction records. Full payment-card details are handled by Stripe under its own terms; ScaleBridger does not store full card numbers.

Location

United States

03

Microsoft Azure

Cloud hosting & infrastructure
Purpose

Host the website and application infrastructure that delivers the Services.

Data types

Personal data transmitted through hosted forms and pages, and server/request logs such as IP address and request metadata, in transit and at rest on hosted infrastructure.

Location

United States

04

Microsoft 365

Business email, scheduling & bookings
Purpose

Email correspondence, appointment scheduling and booking, and internal ticketing related to inquiries and engagements.

Data types

Name, email, appointment and booking details, and message content.

Location

United States

05

Google Analytics 4

Website analytics
Purpose

Understand how the website is used so we can improve it. Loaded only after consent, with consent mode defaulting to denied.

Data types

Pseudonymous analytics identifiers, pages viewed, device and browser data, and approximate location derived from IP address.

Location

United States

06

Microsoft Clarity

Website analytics — session insight & heatmaps
Purpose

Aggregate heatmaps and session insight to improve site usability. Loaded only after consent.

Data types

Pseudonymous interaction data (clicks, scrolls, page views) and device and browser data.

Location

United States

07

Anthropic

AI provider
Purpose

AI-assisted drafting, analysis, and workflow support used in delivering the Services. Consistent with our Terms, sensitive, confidential, or regulated data is not submitted to AI tools except where authorized with appropriate safeguards.

Data types

Only the content submitted for a given task; ScaleBridger limits what is submitted and does not submit sensitive or regulated personal data without authorization and safeguards.

Location

United States

08

GoDaddy

Domain registrar & DNS
Purpose

Domain registration and DNS management for ScaleBridger domains and for client domains ScaleBridger is engaged to manage.

Data types

Domain registration and DNS configuration data, which may include registrant contact details where ScaleBridger manages a client’s domain.

Location

United States

Contents
  1. 01How We Engage Sub-processors
  2. 02Changes to This List
  3. 03International Transfers
  4. 04Contact
01

How We Engage Sub-processors

ScaleBridger engages each sub-processor to process personal data only as needed to provide the Services and on terms that, in substance, are no less protective than those in our Data Processing Agreement, to the extent applicable to the sub-processor’s role. ScaleBridger remains responsible to the client for a sub-processor’s performance of its data-protection obligations.

02

Changes to This List

ScaleBridger updates this page when it adds or replaces a sub-processor that processes personal data. Where required by applicable data-protection law, ScaleBridger provides a mechanism for clients to receive notice of, and reasonably object to, a new sub-processor, as described in the Data Processing Agreement.

03

International Transfers

The sub-processors above are located primarily in the United States, and personal data may be processed there. Where personal data originating from a jurisdiction with cross-border transfer requirements is involved, ScaleBridger and the client put in place an appropriate transfer mechanism as described in the Data Processing Agreement.

04

Contact

Questions about this list can be sent through the contact method on the ScaleBridger website or your Order Form. ScaleBridger, Austin, Texas, United States.

This list is a v0.1 document pending counsel review and names only providers ScaleBridger actually uses. It is referenced by our Data Processing Agreement as the required sub-processor list. Where ScaleBridger processes personal data on a client's behalf, the DPA controls.