Legal

Sub-processors

The companies we use to run Klosemore, what each one handles, and where. Our Data Processing Addendum authorises this list and sets the rules for changing it.

Last updated

Who they are

A sub-processor is a company we use to run Klosemore that processes personal data on our behalf. SIA Ars Ratio uses the companies below. Each one gets only the data its job needs, and section 6 of our Data Processing Addendum sets what we require of them.

Sub-processorWhat it doesWhere
Vercel Inc. 440 N Barranca Ave #4133, Covina, CA 91723, United StatesHosts the website and the app, and passes each request to the AI models (Vercel AI Gateway). Through the gateway it also runs Cohere's Embed, which helps Chat recall earlier conversations, and runs Claude on its own AWS account if ours fails. Counts website visits. Data: Everything Klosemore processes passes through it, including your Chat conversations and what Chat remembers. Website visits as anonymous counts.EU (Frankfurt) for running the website and the app; each request first reaches Vercel's nearest location, and the AI Gateway may pass a request through another Vercel region. United States for Vercel's logs and for Cohere's Embed, on Amazon Bedrock under Vercel's own AWS account. Claude stays in the EU. Safeguard: Certified under the EU-US Data Privacy Framework. Its DPA also includes the standard contractual clauses.
Neon, LLC (a Databricks company) c/o Databricks, Inc., 160 Spear Street, Suite 1300, San Francisco, CA 94105, United StatesRuns the database that stores your workspace. Data: Everything Klosemore stores: account data and the data you connect.EU (Frankfurt, AWS eu-central-1) Safeguard: Certified under the EU-US Data Privacy Framework. Its DPA also includes the standard contractual clauses.
Amazon Web Services EMEA SARL (Amazon Bedrock) 38 Avenue John F. Kennedy, L-1855 LuxembourgRuns Anthropic's Claude, the AI model that reads your data, answers Chat and drafts text. Data: The CRM and email text each request needs, contact details included, and your Chat conversations and what Chat remembers.EU. AWS keeps nothing once a request is done, apart from short-term caching and any request it flags for abuse review, which can sit outside the EU. Safeguard: None for running Claude. A request flagged for abuse review: Amazon's certification under the EU-US Data Privacy Framework.
Clerk, Inc. 660 King Street, Unit 345, San Francisco, CA 94107, United StatesSigns you in, keeps your user account and your workspace's membership, and sends sign-in codes and invitations. Data: Name, email address, profile picture and sign-in records; your workspace's name, members and roles; the invitations you send.United States Safeguard: Certified under the EU-US Data Privacy Framework. Its DPA adds the standard contractual clauses wherever that does not apply.
Google Cloud EMEA Limited (Google Workspace) 70 Sir John Rogerson's Quay, Dublin 2, D02 R296, IrelandHosts our email, including what you send to support@, privacy@ and security@. Data: The email you send us and anything in it.Google's data centres, in and outside the EU. Safeguard: Google LLC is certified under the EU-US Data Privacy Framework. Google's data processing terms also include the standard contractual clauses.

The "Where" column is where each company's systems process your data. If a government asks us for your data, section 7 of the Data Processing Addendum says what we do.

Coming next

These start when the features that need them ship. We name them now, so agreeing to this list covers them too.

Sub-processorWhat it doesWhere
Plus Five Five, Inc. (Resend) 2261 Market Street #5039, San Francisco, CA 94114, United StatesWill send Klosemore's emails, starting with the daily digest of the deals that need you. Data: Your name and email address, and the deal names and values in each digest.EU Safeguard: Certified under the EU-US Data Privacy Framework. Its DPA also includes the standard contractual clauses.
Functional Software, Inc. (Sentry) 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United StatesWill collect error reports, so we see what broke and fix it. Data: Technical details of each error, which can include the data on screen when it happened.EU Safeguard: Relies on the EU-US Data Privacy Framework. Its DPA also includes the standard contractual clauses.

Who is not on this list

The tools your company connects to Klosemore, such as Pipedrive, are not our sub-processors. Your company chose them and has its own contract with each one, and Klosemore reads from them on your company's instruction.

When the list changes

At least 30days before a company not named here starts handling your data, we email your workspace's admins, and any address you give us for data protection notices, and add the company to this page with the date it starts.

You can object within those 30 days by writing to privacy@klosemore.com, on reasonable data protection grounds. We then look for a way to run Klosemore for you without that company. If we cannot find one, you can end the Services Agreement with effect from the day that company starts, with the refund its section 16 gives.

If we have to replace a company at short notice, because it stops its service or has a security problem, we tell you as soon as we can.

More on how we handle data

The Privacy Policy covers what we collect, why, how long we keep it and your rights. The Data Processing Addendum holds the terms this list belongs to.

Change history

None yet. Every change to this document appears here with its date.