Subprocessors

Who else touches your data.

No software company runs on nothing. These are the companies we rely on to operate COMPASS, what each one does, and what actually reaches it. If a funder asks you for this list, this page is the answer and you can send them the link.

Company What it does for us What reaches it
Supabase Database and application functions The system of record. Every record an organization keeps in COMPASS lives here, including client records where an organization is on a paid plan.
Cloudflare Hosting and content delivery Serves the application and this website. Carries requests, not stored records. Also provides the cookieless analytics on this marketing site.
Resend Transactional email Sends account and service email. Carries recipient email addresses and the contents of the messages we send.
Daily.co Video meetings and transcription Used only where an organization turns on meeting features. Carries the audio, video and transcripts of sessions an organization chooses to run through it.
Stripe Payments Carries organization name, plan and an organization identifier. No client record ever reaches it, and that is a contractual constraint rather than a setting.

All of them operate in the United States. COMPASS is built for organizations in the United States and data is stored and processed there.

Named, but not running.

Anthropic Named here for completeness rather than because it is running. AI features are on the roadmap and no client data has been sent to an AI provider. If that changes, this page changes first.

One more, and it is a browser request rather than a vendor.

The COMPASS application loads its typefaces from Google Fonts, which means a visitor's browser makes a request to Google and Google sees the visitor's IP address. No record from COMPASS is involved and nothing is sent deliberately. We are telling you because it is true and because a list that quietly omits it would be a worse list. This marketing site does not do it. Its fonts are served from our own domain.

When this list changes.

This page is the current list. When a company is added or removed it is updated here, and organizations on a paid plan are notified. The commitments we make about these companies belong in an agreement rather than on a web page, which is where you should expect to find them.

Does your funder need something this page does not cover?
Send the question or the questionnaire. It gets answered directly, including the questions where the honest answer is no.
hello@illumipath.io