This page lists the sub-processors that Itogai LLC, a Florida limited liability company (“itogai”), engages to help operate the Subscription Service. This list is referenced from the Privacy Policy and from the Data Processing Agreement that itogai enters into with applicable Customers.
A “sub-processor” is a third party engaged by itogai to process Personal Data on itogai’s behalf. itogai remains responsible to the Customer for the acts and omissions of each sub-processor that affect the Services.
Each sub-processor is bound by a written agreement that:
- limits the sub-processor’s processing to the services it provides to itogai;
- requires the sub-processor to maintain administrative, technical, and physical safeguards appropriate to the nature of the data; and
- where applicable, incorporates the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum or Swiss DPIC) for transfers of Personal Data outside the EEA, the United Kingdom, or Switzerland.
Current Sub-processors
The following sub-processors are engaged as of the Effective Date.
| # | Sub-processor | Role | Categories of Data | Hosting Region |
|---|---|---|---|---|
| 1 | Vercel, Inc. | Application hosting and edge delivery for the Marketing Website and Platform | Account Data, Usage Data, Device and Log Data, transit-level Customer Data | United States |
| 2 | Cloudflare, Inc. | Content delivery network, DDoS protection, edge caching | Device and Log Data, transit-level data | Global edge (primary US) |
| 3 | Supabase, Inc. and Neon, Inc. | Managed relational database hosting for Account Data, Customer Data, and TrustGraph™ structured signals | Account Data, Billing Data, Customer Data, structured signals | United States, European Union |
| 4 | Auth0 (Okta, Inc.) | Authentication and identity management | Account Data, authentication tokens | United States |
| 5 | Stripe, Inc. | Payment processing for Subscription Service and Professional Services fees | Billing Data, payment method information | United States |
| 6 | Brevo (Sendinblue SAS) | Transactional email delivery (account notifications, security alerts, billing notifications) | Account Data, Communications | European Union |
| 7 | Nylas, Inc. | Email and calendar API integration for Microsoft 365 and other non-Google Data Sources | Customer Data (metadata only for Mail; calendar attendees and times) | United States |
| 8 | Anthropic, PBC | Generative-AI model inference powering Akai™ and other relationship-intelligence features, including drafting, summarization, and structured-output extraction. AI training opt-out is in effect for itogai data: Anthropic does not use itogai’s data to train its models. | Process-and-discard content (Slack messages, transcripts, replies to User-sent messages); structured signals only retained | United States |
| 9 | OpenAI, L.L.C. | Generative-AI model inference powering Akai™ and other relationship-intelligence features, including drafting, summarization, and structured-output extraction. AI training opt-out is in effect for itogai data: OpenAI does not use itogai’s data to train its models. | Process-and-discard content; structured signals only retained | United States |
| 10 | People Data Labs, Inc. | Contact enrichment with publicly available business data | Contact records (work email, employer, role) submitted by the Customer for enrichment | United States |
| 11 | Amplitude, Inc. | Product analytics: aggregated and individual usage events for product improvement | Account Data, Usage Data | United States |
| 12 | Sentry (Functional Software, Inc.) | Application error and performance monitoring | Device and Log Data; minimal Personal Data only when bundled in error context | United States |
How itogai Selects Sub-processors
Each sub-processor is reviewed before engagement against the following criteria:
- relevance and necessity to providing the Services;
- the sub-processor’s published security posture (encryption at rest and in transit, access controls, incident-response capability);
- the sub-processor’s published privacy posture (clear processor terms, support for data subject rights, AI training opt-outs where relevant);
- where applicable, certifications such as SOC 2 Type II, ISO/IEC 27001, or independent audits; and
- the legal regimes governing the sub-processor’s processing locations and the availability of approved transfer mechanisms.
itogai favors sub-processors that publish a Data Processing Addendum, that maintain transparent sub-processor lists of their own, and that contractually commit to the AI training opt-outs described above.
Notice of New Sub-processors
itogai may engage additional sub-processors from time to time. itogai will provide notice of new sub-processors in the following circumstances:
- Material additions (a new sub-processor performing a category of services not already covered by an existing sub-processor on this page, for example a new payment processor or a new generative-AI provider): itogai will provide at least thirty (30) days’ advance notice by updating this page and by emailing the registered Account Owner of each Customer that has executed a Data Processing Agreement with itogai. During the notice period, the Customer may object in writing to legal@itogai.com, in which case itogai and the Customer will discuss in good faith. If the parties cannot agree on a path forward within thirty (30) days of the objection, the Customer may terminate the affected portion of the Subscription Service for material breach of the Data Processing Agreement.
- Routine updates (a new sub-processor performing the same category of services as an existing sub-processor on this page, for example a new database region or a substitute transactional-email provider): itogai will update this page and increment the Document Version. No advance notice is required for routine updates.
To subscribe to changes to this page, write to legal@itogai.com with the subject line “Sub-processor notifications.” itogai will add the address to the notification list.
Historical Versions
Upon written request to legal@itogai.com, itogai will provide a prior version of this page that was in effect as of a specified date.
Contact
Questions about this page, sub-processor objections, or notification subscriptions: legal@itogai.com. Data-subject requests and privacy-rights requests: privacy@itogai.com.
Postal address: Itogai LLC 4821 Jumping Way Lake Worth, Florida 33467 United States of America