Subprocessor List
Last updated: July 18, 2026This list identifies providers that 7BE may enable to process Customer Personal Data on behalf of a Customer. A provider applies only when its related feature is enabled. 7BE’s independent-controller vendors may also be described in the Privacy and Cookie Policies.
7BE requires contractual privacy, confidentiality, and security protections appropriate to each provider’s role. Under the Data Processing Addendum, 7BE gives at least 30 days’ advance notice before a new Subprocessor begins processing Customer Personal Data, except for an emergency replacement permitted by the DPA.
| Provider | Processing function | Principal processing location | Data scope / notes |
|---|---|---|---|
| Vercel Inc. | Website and application hosting, content delivery, serverless infrastructure, security | United States; global edge locations | Account, marketplace, technical, and Project traffic necessary to serve the application |
| Prisma Data, Inc. and configured database infrastructure | Application data access layer and managed database services | United States or configured region | Account, marketplace, Project, and Verification records stored by 7BE |
| Stripe, Inc. and affiliates | Payment processing, Stripe Connect, payouts, fraud, identity, tax, and transaction administration | United States and other locations described by Stripe | Identity, business, payment, transaction, tax, payout, and compliance information; complete card data is handled by Stripe |
| Google LLC | Authentication and, when configured for a Project, approved productivity or cloud functions | United States and global infrastructure | Account identifiers and only the Project data expressly enabled for an approved Google service |
| Intercom, Inc. | Customer support, support communications, and service messaging | United States and other contracted locations | Account, contact, support, and limited diagnostic information; Customer Data should not be placed in support chat unless necessary |
| HubSpot, Inc. | Customer relationship management, forms, and business communications when used for contracted support | United States and other contracted locations | Business contact, relationship, form, and communication records |
| n8n GmbH or 7BE-hosted n8n environment | Approved workflow automation and systems integration | Configured hosting region | Only data fields required by an approved workflow |
Project-Specific AI and Testing Providers
7BE will identify every Project-specific AI model, evaluation, annotation, observability, or testing provider in the Project Order and/or an updated version of this list before that provider receives Customer Personal Data. The notice will state the provider, function, location, and data scope.
No Project-specific provider may use Customer Data to train or improve a general-purpose or shared model, sell the data, use it for advertising, or retain it beyond the contracted purpose. If a provider cannot accept those restrictions, production Customer Data must not be sent to it.
Other Providers Not Acting as Subprocessors
Analytics, advertising, business-development, and public-source providers such as Plausible, Google Analytics or Ads, LinkedIn, Meta, Apollo, and similar tools do not receive Customer Personal Data under a Project unless expressly moved to the Subprocessor table through the DPA notice process. Their limited independent-controller processing, where enabled, is described in the Privacy and Cookie Policies and is subject to consent or opt-out controls where required.
Change Notices and Objections
Customers may subscribe to Subprocessor notices by emailing privacy@7be.io with the account name and notice address. A Customer may object on reasonable data-protection grounds during the notice period as described in the DPA.
Questions: privacy@7be.io