Sub-processors
Last updated September 28, 2026
These companies process personal data on our behalf to provide OmniLead. Each is bound by data protection terms at least as protective as our DPA.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage and background queues | All account and Customer Data | European Union (Frankfurt, Germany) |
| Netlify, Inc. | Application hosting, serverless and scheduled functions, content delivery | Data in transit through the application; request logs | United States, with global edge locations |
| Stripe, Inc. | Payments, subscriptions, invoices and tax calculation | Billing contact, payment details, tax IDs | United States |
| Resend, Inc. | Transactional email from OmniLead (verification, receipts, account notices, opt-out codes) | Recipient email address and message content | United States |
| MillionVerifier | Mailbox-level email verification, when enabled | Email addresses being verified | European Union |
Optional providers
Some features call public data sources directly, such as SEC EDGAR, Grants.gov, NIH RePORTER, NSF Awards, OpenAlex, ORCID and Crossref. These receive search queries, not your Customer Data. Key-gated providers (Google Places, SerpAPI, OpenCorporates) and optional AI drafting (Anthropic) are used only when a workspace enables them, and receive only the query or draft text needed for the feature.
Changes
We'll update this page and email account owners at least 30 days before adding a sub-processor, as described in our DPA. Questions: privacy@omni.cloudgens.net.