SUBPROCESSOR REGISTER ยท AUGUST 23, 2026
Providers used to operate configured PITCH services.
Conditional providers process data only when the related feature is configured. PITCH will maintain this register as providers change.
Core infrastructure
Render provides application hosting, managed PostgreSQL, and runtime logs. Amazon S3-compatible private storage may hold encrypted or access-controlled documents when configured. ClamAV or a configured malware-scanning host inspects uploaded file bytes.
Customer-enabled connections
Google, Microsoft, and Yahoo support authorized outbound email. Twilio and existing RingCentral connections support configured messaging. Intuit QuickBooks and Xero support accounting synchronization only after a workspace owner or administrator authorizes the connection.
Contractor data providers
CompanyCam, EagleView, RoofScope, HOVER, JobNimbus, AccuLynx, and GAF QuickMeasure may process project, customer, photo, measurement, report, or migration data only when a workspace authorizes the related production connection and the provider grants required access. A requested or provider-setup card does not mean data is being sent.
Payments and AI
Square and Stripe support configured subscription or customer-payment paths; provider-hosted forms keep card data out of PITCH application forms. OpenAI processes user-submitted PITCH Copilot prompts and selected context only when Copilot is enabled and used.
Assurance boundary
This register does not state that every conditional provider is active, that every provider has the same retention terms, or that PITCH is SOC 2 or ISO 27001 certified. Vendor contracts, transfer terms, assurance reports, and deletion commitments require ongoing owner and legal review.