Subprocessors

How to read this

A subprocessor is a company we rely on that may process data you entrust to us. We keep the list deliberately short — every additional vendor is another place your data can go — and we list services even when the feature that uses them is switched off for your workspace, because a dormant vendor is still a vendor.

The “posture” line restates what each vendor publishes on its own trust page, linked so you can check it rather than take our word for it. We don’t audit our vendors ourselves and we’re not warranting their certifications — we’re telling you who they are so your own review can proceed.

Automated analysis and generation

Some of what we deliver — content drafting, competitive analysis, visibility research — involves automated generation. Today, no client data is sent to any third-party model provider as part of running this platform: none of the applications your workspace touches call one. We do use such services for our own first-party content operations, on data we own — we mention it because it is true, not because it touches you.

If an engagement of yours would involve automated processing of your data, the specific provider, what it receives, and its retention and training terms are named in your data-processing agreement and agreed in writing before any of your data reaches it. We would rather tell you that this category exists and is disclosed at contract than let you find the gap yourself.

What this list deliberately excludes

Purely financial and administrative relationships that process no client or personal data — our bank, our accountant, our registered agent — are not listed, because naming them tells you nothing about where your data goes. If you want the full corporate vendor register for a diligence process, ask and we will share it under NDA.

Our own infrastructure

Outbound email from our website is relayed through integration infrastructure we build and operate ourselves rather than a third-party automation service, which is why our email provider key never sits in the website. It is our system, not a subprocessor — but it is in the path, so we name it here rather than let you discover it.

International transfers

Deadpan Labs LLC is a Florida company and our infrastructure is operated in the United States. Where a client is subject to the GDPR or UK GDPR, transfers rely on the Standard Contractual Clauses or equivalent mechanisms offered in each vendor’s data-processing agreement, which we execute with them.

Changes to this list

When we add or remove a subprocessor we update this page and move the date at the top. Clients under contract are notified in accordance with their agreement, and any objection process agreed in a DPA applies. To be told directly when this list changes, email contact@deadpanlabs.com and ask to be added to the notification list.