Sub-processors
- Effective:
- June 1, 2026
- Last updated:
- October 16, 2026
This page lists the third-party sub-processors that MySummitKeep LLC engages to process personal data on behalf of our customers. It is the authoritative, current version of Annex C to our Data Processing Addendum.
Approved Sub-processors
| Sub-processor | Service provided | Location | Personal Data category |
|---|---|---|---|
| Microsoft Azure (Azure SQL, Azure Storage, App Service) | Cloud hosting, database, application runtime | United States | All categories |
| Microsoft Azure Communication Services | SMS and email delivery | United States | Mobile phone numbers, email addresses, message content |
| Twilio Inc. | SMS delivery | United States | Mobile phone numbers, message content |
| Stripe, Inc. | Subscription payment processing | United States | Billing information, payment-card tokens |
| Plaid Inc. | Bank-account verification and financial-account linking | United States | Financial account information (account/routing details, balances, transactions) |
| Anthropic, PBC | AI model for the in-app help assistant, AI docs search and the website product assistant | United States | Text typed into those assistants (website assistant: anonymous questions, no account data) |
| Cloudflare, Inc. (Turnstile — website product assistant and contact form only) | Bot protection before a visitor’s question is answered or a contact message is sent | United States | Visitor IP address and browser signals, when the assistant or the contact form is used |
| Microsoft Clarity (marketing site only) | Session replay, heatmaps | United States | Marketing-site interaction data (no signed-in users) |
| Google Analytics 4 (marketing site and public unit pages on mysummitkeep.org, with consent) | Aggregate web analytics (unit pages: loaded directly, with its own measurement ID) | United States | Marketing-site and unit-page interaction data (no signed-in users; unit pages: page address without query string, page title, unit web-address name, origin-only referrer; for an individual blog post only a generic address and title, never the post’s own) |
| Meta Platforms, Inc. (Meta Pixel — marketing site only, with consent) | Ad measurement and audience building for Meta/Facebook/Instagram ad campaigns | United States | Marketing-site interaction data (IP address, page URL, browser identifiers) — only after the user consents to the “Advertising” category |
Notice of Changes
We tell each customer’s account administrator about an addition or replacement at least fifteen (15) days before it takes effect, by an in-app message or by email, and we update this page. Questions or objections: privacy@mysummitkeep.com.