Subprocessors
Effective Date: September 21, 2026
Last Updated: August 22, 2026
Version: 1.2
About This Page
Neural Partners Inc. ("Neural Partners") uses third-party service providers ("Subprocessors") to provide and support our products and services. This page lists each Subprocessor that processes Personal Data on Neural Partners' behalf, the nature of the services provided, and the jurisdiction in which processing primarily occurs.
This list is incorporated by reference into the Neural Partners Data Processing Addendum ("DPA") and into Section 5.4 of the Neural Partners Master Subscription Agreement ("MSA").
Neural Partners remains responsible for the performance of its Subprocessors under the DPA and MSA. Each Subprocessor is bound by data-protection obligations substantially similar to those Neural Partners owes its Customers.
Scope of this list
This list covers Subprocessors engaged by Neural Partners, including those used in processing Customer Personal Data that originates from Customer storefronts. Neural Partners remains a processor of that data and this list discloses the Subprocessors involved in it.
This list does not cover third-party services that a Customer independently configures on a domain the Customer owns and controls. Where a Customer adds its own analytics, advertising or other third-party services to its own property, the Customer is the controller of that processing and it is governed by the Customer's own privacy policy, as set out in the DPA and in our Privacy Policy.
How this list is organised
Subprocessors are grouped by how they are reached, because the two groups are verifiable in different ways.
- Reached from your browser — these services receive data directly from the visitor's device. They are observable in a browser's developer tools.
- Reached from Neural Partners' systems — these services receive data from our servers. They do not load in the visitor's browser and will not appear in developer tools.
Some providers appear in both groups where they perform distinct functions.
Reached from your browser
Infrastructure
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Cloudflare, Inc. |
Authoritative DNS, domain registrar services, and edge network analytics used in Neural Core client reporting. |
United States and other locations as applicable |
cloudflare.com/privacypolicy |
Communications
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Klaviyo, Inc. |
Marketing email and SMS delivery, audience segmentation, subscriber management, and customer-engagement analytics. |
United States |
klaviyo.com/legal/privacy-notice |
Payments
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Stripe, Inc. |
Payment processing. Stripe may collect payment-card information directly through embedded payment elements. |
United States |
stripe.com/privacy |
| Apple Inc. |
Apple Pay payment processing on Neural Partners-powered storefronts. |
United States |
apple.com/legal/privacy |
Identity, Analytics, and Advertising
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Google LLC (Sign in with Google) |
OAuth sign-in initiated from the visitor's browser. |
United States and other locations as applicable |
policies.google.com/privacy |
Monitoring and Observability
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Functional Software, Inc. (Sentry) |
Application error and performance monitoring. |
United States |
sentry.io/privacy |
| PostHog Inc. |
Product analytics and behavioural cohort analysis across Neural Core and Neural Partners-powered storefronts. PostHog's session-replay and heatmap features are not enabled. |
United States |
posthog.com/privacy |
Reached from Neural Partners' systems
Infrastructure
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Amazon Web Services, Inc. |
Cloud infrastructure (compute, storage, database hosting, CloudFront CDN, IAM), Amazon Simple Email Service (Amazon SES) for transactional email, Amazon Cognito for end-consumer authentication, and Amazon Bedrock for hosted access to AI foundation models. |
United States (with regional configuration where applicable) |
aws.amazon.com/privacy |
AI Model Providers
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Anthropic, PBC |
AI model services (Claude) for conversational, generative, search, ranking, and recommendation features, including processing of images submitted by end consumers to AI-assisted design and recommendation features (such as room photographs). Anthropic's commercial API terms prohibit training on Neural Partners' API inputs and outputs — of any modality, including images — by default. |
United States |
anthropic.com/legal/privacy |
Identity and Access
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| WorkOS, Inc. |
Authentication and directory services for Neural Core business users. WorkOS does not process end-consumer or shopper personal data; end-consumer authentication is handled by Amazon Cognito. |
United States |
workos.com/privacy |
Search
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Typesense, Inc. (Typesense Cloud) |
Hosted search execution. Query strings are transmitted to Typesense in order to execute a search and are not retained by Typesense; Typesense's query-logging and search-analytics features are not enabled. The system of record for search records is operated by Neural Partners. |
United States |
typesense.org/privacy |
Communications
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Salesforce, Inc. (Slack) |
Internal workspace messaging and operational alerting. Inbound webhooks deliver lead notifications, form-submission notifications, and system alerts which may contain Personal Data. |
United States |
salesforce.com/company/privacy |
Identity, Analytics, and Advertising
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Google LLC |
Sign in with Google (OAuth); Google Analytics 4 for website and storefront analytics, including one server-side measurement integration which withholds transmission where a Global Privacy Control signal or a stored opt-out is present; Google Ads conversion measurement; Google Cloud Console for API key and integration management; and Google Workspace (Gmail, Drive, Calendar) for internal business records, which may contain Personal Data. |
United States and other locations as applicable |
policies.google.com/privacy |
Monitoring and Observability
| Subprocessor |
Services Provided |
Processing Location |
Privacy Notice |
| Grafana Labs, Inc. (Grafana Cloud) |
Hosted observability platform for operational telemetry (logs, metrics, traces), and a read-only reporting connection to Neural Partners' production database. Access is restricted by column-level database privileges, so that no contact or identity field is reachable. Grafana Labs does not retain, cache, or snapshot query results. Connectivity is over a private network tunnel into Neural Partners' AWS environment. |
United States |
grafana.com/legal/privacy-policy |
Change Log
| Date |
Change |
| September 21, 2026 (v1.2) |
Subprocessor list rebuilt from a verification of production data flows rather than from vendor accounts, and reorganised into browser-reached and server-reached groups. Added: Apple Inc. (Apple Pay), Amazon Cognito and Amazon Bedrock (under AWS), Cloudflare, Inc., WorkOS, Inc., Salesforce, Inc. (Slack), Typesense, Inc., PostHog Inc., Grafana Labs, Inc., and Google Workspace (consolidated under Google LLC). Removed: HUMAN Security, Inc. (relationship ended); Meta Platforms, Inc. (advertising pixel removed from all Neural Partners' surfaces). Confirmed not Subprocessors (not separately listed): OpenAI, LLC and Google Merchant Center (receive product catalogue data only, no Personal Data); Clay Labs, Inc. (processes Neural Partners' own prospect data, not Customer Personal Data); Midjourney, Inc. (marketing visuals only, no Customer Content submitted); Amazon.com Services LLC (Amazon Advertising), ElevenLabs, Inc., Microsoft Corporation including Microsoft Clarity, Higgsfield and Luma Labs (not in production use — browser-tag absence verified 15 August 2026 in both consent-granted and Global Privacy Control states); Hugging Face (model download only); Moonshot AI (reached via AWS Bedrock); Google Cloud Platform (consolidated under Google LLC); locally-hosted open-source models (no data transmission). |
| May 23, 2026 (v1.0) |
Initial version published. |
Version 1.1 was prepared but never published. It is superseded by this version and was not at any time served to Customers.
Contact
Questions about this Subprocessor list, requests for additional information, or objections to a new Subprocessor:
Neural Partners Inc.
Mailing Address: 390 NE 191st St, STE 65820, Miami, FL 33179
← Back to Legal Center
