Insights7 Sub-processors and Service Providers
Last updated: October 8, 2026
Version: 1.0
Insights7, Corp. (“Insights7”) uses the third parties below to provide the Insights7 platform and run its business. This page is referred to in our Privacy Policy and our Data Processing Agreement (DPA).
1. Sub-processors (may process Customer Data)
These providers may process personal data contained in Customer Data on our behalf when we provide the platform. Each is bound by written data protection terms at least as protective as our DPA.
| Sub-processor | What it does for Insights7 | Data involved | Location of processing | Transfer safeguard |
|---|---|---|---|---|
| Heroku (Salesforce, Inc.) | Application hosting and managed PostgreSQL database | All Customer Data and account data | United States | SCCs / DPF |
| Amazon Web Services, Inc. | Underlying cloud infrastructure used by Heroku | All Customer Data and account data (hosted, not accessed) | United States (AWS US regions used by Heroku) | SCCs / DPF |
| PostHog, Inc. | Product analytics (page views and feature use) | User ID, company ID, pages viewed, IP address, browser and device information | European Union (PostHog EU Cloud) | EU hosting; SCCs for any onward access |
| Mailgun Technologies, Inc. | Transactional email (for example, invitations and password resets) | Name, email address, email content | United States | SCCs / DPF |
| Google LLC (Google Fonts) | Delivers the font used in the platform | IP address and browser information of platform users (no Customer Data) | Global | SCCs / DPF |
2. AI model provider
| Provider | What it does for Insights7 | Data involved | Location | Safeguard |
|---|---|---|---|---|
| OpenAI, L.L.C. (API) | Generates draft suggestions in the platform’s AI Features, such as the AI Process Generator | No Customer Data. Only publicly available information (for example, a customer’s public website) and Insights7 content | United States | API data is not used to train OpenAI models |
We list OpenAI for transparency even though we do not send Customer Data to it.
3. Service providers for Insights7’s own business
These providers help us run our website, sales, marketing and administration. They do not process Customer Data. They process personal data for which Insights7 is the controller, as described in our Privacy Policy.
| Provider | What it does for Insights7 | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting, content delivery and security for insights7.com | Global |
| Calendly LLC | Meeting booking on our Contact page | United States |
| HubSpot, Inc. | Customer relationship management (CRM) and marketing email | United States |
| Google LLC (Google Workspace) | Company email, documents and file storage | United States |
| Stripe, Inc. | Payment processing for customers who pay by card or by ACH through Stripe. Stripe collects and holds card and bank account details; Insights7 does not store full card numbers. (Other customers pay by direct ACH bank transfer to Insights7.) | United States |
4. Changes to this list
We will update this page before we add or replace a sub-processor in Section 1, and we will email the account administrators of our customers at least 30 days before the new sub-processor starts processing Customer Data. Customers can also subscribe to updates by emailing info@insights7.com with “Sub-processor updates” in the subject line.
A customer may object to a new sub-processor on reasonable data protection grounds by emailing info@insights7.com within that 30-day period. We will work with the customer in good faith to find a solution. If we cannot resolve the objection within 30 days, the customer may terminate the affected part of the service and receive a refund of prepaid fees for the unused part of its Subscription Term, as set out in our DPA.
5. Contact
Questions about this list: info@insights7.com.