Subprocessors
Cube27 IT Private Limited uses these providers to run CiteLadder. Each receives only the data its purpose needs.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Google Cloud | Hosting the application, database, file storage and backups | All workspace data held by the Service | India (Mumbai region) |
| Cloudflare | Website and app delivery, DNS, security and request routing | Requests passing through, including IP addresses and page traffic | Global network |
| OpenAI | Platform-provided AI assistance, such as the Growth Agent, when you have not set your own provider | Your instructions and the relevant project context | United States |
| Keenable | Web research for brand and competitor discovery | Research queries such as brand, domain and competitor names | United States |
| Tavily | Web search for commerce competitor research | Search queries such as product and competitor names | United States |
Providers you connect
When you connect a provider under your own credentials, that provider acts under your agreement with it, not as our subprocessor. We send it only the requests you configure or run.
- AI answer engines and assistants you set in Providers settings, such as OpenAI, Anthropic and Google Gemini, under your own API keys. This includes any content or Growth Agent model you choose.
- DataForSEO, under your own credentials, for Google AI Overview and search intelligence data.
- Google Search Console, Google Analytics and Bing Webmaster Tools, for the properties you authorise.
- Google sign-in, when you choose it to sign in.
- MCP and API clients you authorise, such as an AI assistant, which receive the data they request under their own terms.
Independent service providers
- Razorpay processes payments as an independent payment provider under its own terms. We never receive full card details.
- Google Analytics measures website visits only when it is enabled and you accept optional cookies.
Changes
We update this page before adding or replacing a subprocessor. Customers covered by the Data Processing Agreement at /dpa receive notice and can object as it describes.
Questions about providers: contact@cube27.com.