Legal
Subprocessors
Effective: July 3, 2026 · Last updated: September 30, 2026
What this page is
Gault uses third-party services ("subprocessors") to deliver its audit, hosting, and support functions. This page lists every one of them so customers can review who touches data processed through Gault. If a subprocessor changes, we update this page; for changes material to how your data is handled, we notify active customers by email in advance — at least 30 days where practicable.
Infrastructure & hosting
| Service | Purpose | Data category | Location |
|---|---|---|---|
| Vercel, Inc. | Application hosting, edge network, serverless compute | All data flowing through Gault | USA (global edge) |
| Supabase Inc. | Primary database (Postgres), authentication | Account data, tenant data, location confirmations | USA |
| Upstash, Inc. | Redis cache & scan-result storage | Roster data, scan results, operational state | USA |
Communications, security & analytics
| Service | Purpose | Data category | Location |
|---|---|---|---|
| Resend, Inc. | Transactional email (verification codes, account/status notices, report delivery) | Recipient name + email, message content | USA |
| Cloudflare, Inc. (Turnstile) | Bot protection on public forms | Browser/interaction signals, IP | USA (global network) |
| PostHog, Inc. | Product analytics, error capture, and session replay (a recording of how a page was used; form inputs are masked) | Usage events, page views, session recordings, identifiers/cookies | USA |
| Functional Software, Inc. (Sentry) | Production error monitoring | Error events, stack traces (may incidentally contain customer data) | USA |
| GitHub, Inc. | Source code repository & CI | Source code only (no customer data) | USA |
Data & search providers used during scans
| Service | Purpose | Data sent | Location |
|---|---|---|---|
| Google LLC (Maps Platform) | Place lookup, place details, competitor search, geocoding, PageSpeed | Business names, addresses, place IDs, website URLs | USA |
| Geocodio (Dotsquare LLC) | Address geocoding for map pins | Location addresses | USA |
| Apify Technologies s.r.o. | Google Business Profile post and review scraping | Place IDs, brand names | EU (Czech Republic) |
| Outscraper LLC | Alternative reviews & place-details scraping (when enabled) | Place IDs | USA |
| DataForSEO (DataForSEO LLC) | Competitor search on Google Maps (when enabled) | City-level queries, business categories | USA / Ukraine |
| Microsoft Corporation (Azure Maps) | Primary place resolution | Business names, addresses | USA |
| Geoapify GmbH | Secondary place resolution fallback | Business names, addresses | EU (Germany) |
| Foursquare Labs, Inc. | Multi-location chain search | Brand names | USA |
| Firecrawl (SideGuide Technologies, Inc.) | Website content extraction during onboarding/scans | Customer website URLs | USA |
| Brave Software, Inc. (Search API) | Supplemental search grounding for AI Visibility, press and earned-media checks | Business and brand names, city-level queries | USA |
| Wikimedia Foundation (Wikipedia API) | Checks whether a brand has an encyclopedia entry (an AI-visibility signal) | Brand names | USA |
| RDAP registries via rdap.org | Domain registration age lookup (public registry data, no account) | Customer website domain names | USA / registry-dependent |
AI providers
| Service | Purpose | Data sent | Location |
|---|---|---|---|
| Anthropic, PBC (Claude) | AI Visibility analysis, CSV column mapping, onboarding assistance | Business names, cities, brand metadata; CSV row samples during onboarding | USA |
| OpenAI OpCo, LLC (ChatGPT) | AI Visibility — one of the engines read for every network | Business names, cities | USA |
| Meta Platforms, Inc. (Meta AI) | AI Visibility — one of the engines read for every network; answers use Meta's web search from the location's city | Business names, cities | USA |
| Google LLC (Gemini) | Brand checks — reading pictures from a location's public listing, website and social pages | Public images and page screenshots | USA |
Payments
| Service | Purpose | Data category | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscriptions, invoices, sales tax | Billing contact name and email, payment-method tokens, invoice history (Gault never stores card numbers) | USA |
Your choice on subprocessors
Customers who object to a particular subprocessor — for example, declining data flow to AI providers — may not be able to use the corresponding feature. Where reasonably possible we offer feature-level ways to avoid a specific flow. Questions about any vendor: hello@gaultandco.com.