Last updated: February 2026
This page lists the categories of third-party service providers (sub-processors) we may use to deliver SalesCanvas.ai. The Currently active section below names the specific providers in use today. The broader category lists show the pool of providers we may add to or rotate within over time as we optimize for quality, cost, latency, and reliability.
The specific providers that touch customer data right now. We notify Enterprise customers at least 30 days before material additions go live; see the What's New page for change notes.
| Category | Provider | Data processed |
|---|---|---|
| AI Models | Anthropic (Claude), OpenAI (GPT), Google (Gemini) | Prompt content derived from briefing inputs. No-training tier enabled where supported by the vendor. |
| Web search | Exa.ai | Search queries derived from company names + meeting context. No user PII transmitted. |
| Database | MongoDB Atlas | All customer-stored data. Encryption at rest (AES-256), encryption in transit (TLS 1.3). |
| Hosting | Emergent Labs (managed Kubernetes) | All application traffic transits Emergent infrastructure. TLS 1.3 in transit; pod-level isolation. |
| Resend | Recipient email + transactional message bodies (verification, billing, digests). No briefing payloads. | |
| Payments | Stripe | Billing email + last-4 of card (full PAN held by Stripe directly). PCI-DSS compliant. |
| Error monitoring | Sentry | Anonymised stack traces + request URLs + user IDs. Sensitive fields scrubbed before transmission. |
| CRM (opt-in) | HubSpot, Salesforce, Attio | Engaged only when the customer connects via OAuth. Briefing summaries pushed to records the user explicitly selects. Tokens encrypted at rest with Fernet. |
Want a redacted list scoped to your tenant? Email privacy@salescanvas.ai and we'll respond within 5 business days. Enterprise customers receive a current sub-processors list as part of their Data Processing Agreement.
Used to generate intelligence briefings, executive summaries, playbooks, reference cards, and structured outputs from your inputs. We access these providers at the API level; per their published policies, API inputs are not used to train their models.
Used to retrieve current public information about the organizations you brief on (news, leadership changes, earnings, product launches). Search queries are derived only from public details — never from your private intel or notes.
Handles all payment processing. We do not store your credit card numbers or payment credentials.
Payment processing is the one category we specifically commit to. If we ever change payment processors, this page will be updated and active subscribers notified.
Used to deliver transactional emails (briefing reports, billing receipts, alerts, ticket notifications). Your email address and the email content are transmitted to enable delivery.
Receives error reports that may include your user ID, request URL, and browser environment when something goes wrong. These services do not receive your briefing content.
Underlying compute, database, object storage, and CDN infrastructure. All data is encrypted in transit and at rest.
If we enable product analytics in the future, we may use one or more of the following to understand aggregate usage patterns. We do not transmit your briefing content to these services.
If — and only if — you connect a CRM, we transmit briefing summary content (executive summary, key insights, customer name) to your authorized CRM workspace using credentials you provide. Tokens are AES-256 encrypted at rest and can be revoked at any time from Profile → Integrations.
We only transmit data to a CRM you explicitly authorize. Disconnecting a CRM in your profile immediately wipes the stored credentials.
We may add or remove providers within these categories at any time without additional notice, except for the Payment Processing category which is specifically named. We will notify Enterprise customers of material changes per the terms of their Data Processing Agreement.
For any privacy-related question, contact privacy@salescanvas.ai. For our full Privacy Policy, see /privacy.
Essential cookies keep you signed in and the app working. With your permission we'd also like to use analytics cookies to learn what's helpful and what isn't. We never sell your data. See our Privacy Policy for details.