Subprocessors
Third-party services CloneALO uses or intends to use. Anything marked 'not connected' handles no CloneALO data today.
Current list
| Service | Purpose | Data touched | Status |
|---|---|---|---|
| Vercel | Application hosting and edge delivery | Request metadata | planned |
| Render | Backend services | Request metadata | planned |
| Supabase | Database, authentication, and file storage | Borrower records and documents | in use |
| Twilio | SMS and voice | Contact phone numbers, message content | not connected |
| Resend | Transactional email | Contact email addresses, message content | not connected |
| Sign-in, Gmail, and Calendar | User mailbox and calendar, per-user OAuth | not connected | |
| Microsoft | Outlook mail and calendar | User mailbox and calendar, per-user OAuth | not connected |
| OpenAI | Assistive drafting and summarization | Redacted prompt content | not connected |
| ATTOM / PropertyRadar | Property data | Property addresses | not connected |
| Firecrawl | Guideline and content retrieval | Public web content | not connected |
| Stripe | Billing | Company billing contacts | not connected |
| Credit reseller / bureau | Credit reports | Borrower credit data | not connected |
| LOS provider | Loan origination system sync | Loan files | not connected |
Each subprocessor requires an executed agreement, breach-notification terms, retention terms, and a deletion procedure before live borrower data is shared with it.