Sub-processors
Last updated: 2026-05-16
This page lists the sub-processors that BrightSumo engages to help operate the website at brightsumo.co. A sub-processor is a third-party data processor engaged by us that has, or potentially will have, access to or processes personal data we control. This list is provided in accordance with our Privacy Policy and applicable data protection law.
Effective date: 2026-05-16.
Each sub-processor is engaged under contractual terms that require appropriate technical and organisational measures, confidentiality, processing only on our documented instructions, and assistance with data subject requests and security incidents, consistent with Article 28 of the EU/UK GDPR and equivalent obligations under other applicable laws. Where personal data is transferred outside its country of origin, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, and applicable adequacy decisions.
Current sub-processors
| Provider | Purpose | Location | Data types |
|---|---|---|---|
| Cloudflare, Inc. | DNS, CDN, edge caching, bot mitigation, TLS termination | United States and global edge network | IP address, request metadata, security telemetry |
| Vercel Inc. | Website hosting and static asset delivery | United States and global edge network | IP address, request metadata, server logs |
| Resend, Inc. | Transactional email delivery (replies and notifications) | United States | Email address, message content, delivery metadata |
| Plausible Insights OÜ | Privacy-respecting, cookieless aggregate web analytics | European Union | Pseudonymised, aggregate page-view data; no cross-site profile |
| GitHub, Inc. | Source control and deployment pipeline | United States | No personal data of website visitors; internal source code only |
Product sub-processors
Sub-processors used by the products operated by BrightSumo, including Sourceloop.ai and Orchly.ai, are listed on each product's own sub-processor page. Those lists reflect integrations with advertising platforms (such as Google, Meta, LinkedIn, and TikTok), customer relationship management systems, and other tools authorised by the customer through that product.
Notice of new sub-processors
We will update this page when we add or remove a sub-processor. Where required by applicable law or a written agreement with a customer, we will provide advance notice of material changes through this page or by email so that you have a reasonable opportunity to object. To receive proactive notifications, email hello@brightsumo.co with the subject "Sub-processor updates".
Questions
Questions about a sub-processor or the safeguards we apply? Email hello@brightsumo.co.
This document is provided for transparency. It is not legal advice. If you have a question about it, contact us at hello@brightsumo.co.