Trust
Subprocessor register
These providers may process customer data to deliver SearchVoro. “Conditional” means the provider is used only when the related integration or feature is enabled.
Current register
Who processes what
Last reviewed October 7, 2026. We will update this page when the production provider set changes.
| Provider | Use | Purpose | Data processed | Processing location | Added / first verified |
|---|---|---|---|---|---|
| Cloudflare | Active | DNS, edge proxying, TLS at the edge, DDoS protection, and request filtering | IP address, request metadata, hostname, and encrypted traffic in transit | Global edge network; origin region is disclosed in the DPA | In use by 2026-07-25 |
| LeaseWeb Netherlands B.V. | Active | RKE2 compute and networking, database, queue, cache, and persistent storage | Account data, connected-property data, application records, and encrypted credentials | Netherlands (Amsterdam region); contractual transfer safeguards are supplied in the DPA | Network operator independently verified 2026-07-26 |
| OpenAI | Conditional | Generative content and analysis when an OpenAI-backed feature is selected | The prompt and customer content needed for the requested feature | Provider-controlled processing under its API terms | Available by 2026-07-25 |
| Anthropic | Conditional | Generative content and analysis when an Anthropic-backed feature is selected | The prompt and customer content needed for the requested feature | Provider-controlled processing under its commercial API terms | Available by 2026-07-25 |
| Conditional | Gemini analysis and connected Google services selected by the customer | Feature prompts or data authorized through the connected Google service | Provider-controlled processing under the applicable Google service terms | Available by 2026-07-25 | |
| Perplexity | Conditional | AI-answer visibility checks against supported Perplexity services | Customer-defined prompts, domain, brand terms, and competitor terms | Provider-controlled processing under its API terms | Available by 2026-07-25 |
| DataForSEO | Conditional | Keyword, SERP, backlink, and competitor research | Keywords, domains, markets, locations, and research parameters | Provider-controlled processing under its service terms | Available by 2026-07-25 |
| Stripe | Active | Checkout, subscription billing, and payment-status webhooks | Billing contact, customer and subscription identifiers, and payment metadata | Provider-controlled processing under the Stripe DPA | Available by 2026-07-25 |
| Cloudflare R2 | Conditional | Encrypted-in-transit offsite copies of the nightly database backup, when offsite backup is enabled | A full database backup (account data, application records, encrypted credentials) | Provider-controlled storage region under Cloudflare's terms | Added to register 2026-10-06 |
| Ollama Cloud | Conditional | Generative content and analysis when platform AI routing selects an Ollama Cloud model | The prompt and customer content needed for the requested feature | Provider-controlled processing under its API terms | Added to register 2026-10-06 |
| DeepSeek | Conditional | Generative content and analysis when platform AI routing selects a DeepSeek model | The prompt and customer content needed for the requested feature | Provider-controlled processing; provider is based in China | Added to register 2026-10-06 |
| Moonshot AI (Kimi) | Conditional | Generative content and analysis when platform AI routing selects a Kimi model | The prompt and customer content needed for the requested feature | Provider-controlled processing; provider is based in China | Added to register 2026-10-06 |
| MiniMax | Conditional | Generative content and analysis when platform AI routing selects a MiniMax model | The prompt and customer content needed for the requested feature | Provider-controlled processing; provider is headquartered in China | Added to register 2026-10-06 |
| Zhipu AI (GLM) | Conditional | Generative content and analysis when platform AI routing selects a GLM model | The prompt and customer content needed for the requested feature | Provider-controlled processing; provider is based in China | Added to register 2026-10-06 |
| Reddit and Algolia (Hacker News search) | Conditional | Community monitoring searches when a customer uses Communities | Brand and product search terms only | Provider-controlled processing under each API's terms | Added to register 2026-10-06 |
| Microsoft (Bing Webmaster, Clarity, IndexNow) | Conditional | Connections a customer adds for their own site | The site's domain and the customer's own API key or token | Provider-controlled processing under Microsoft's terms | Added to register 2026-10-06 |
| Contentful and Yext | Conditional | Connections a customer adds for their own content or listings | The customer's own space/listing identifiers and tokens | Provider-controlled processing under each provider's terms | Added to register 2026-10-06 |
| Google Fonts | Active | Web fonts on searchvoro.com | Visitor IP address and browser details sent when fonts load | Google-controlled processing under Google's terms | Added to register 2026-10-06 |
| Self-hosted analytics (analytics.nforge.dev) | Active | Cookieless, first-party page analytics on searchvoro.com and the apps, operated on SearchVoro's own infrastructure | Page URL, referrer, and coarse device data; no cookies | Our own infrastructure (see LeaseWeb above) | Added to register 2026-10-06 |
| Fastmail | Active | Sending account emails (password reset, team invitations), scheduled reports, and replies to contact requests | Recipient email address, message content, and delivery metadata | Provider-controlled processing under Fastmail's terms (Fastmail Pty Ltd, Australia) | Added to register 2026-10-07 |
Provider names and general regions are public; IP addresses, cluster identifiers, and precise topology remain security-sensitive. Contact [email protected] for the current DPA and provider-specific transfer safeguards before onboarding regulated data. The LeaseWeb entry identifies the independently verified network operator and general region; the DPA remains the controlling record for the contracted legal relationship.