1. Subprocessors
1.1 Cube27 IT Private Limited uses these providers to run CiteLadder. Each receives only the data its purpose needs.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Google Cloud | Hosting the application and database | All workspace data held by the Service | United States (us-central1) |
| Cloudflare | Website and app delivery, DNS, security and request routing | Requests passing through, including IP addresses and page traffic | Global network |
| Anthropic | AI models for the Agent and other platform-provided AI assistance, and the Claude answer engine when CiteLadder supplies the keys | Your instructions, the prompts you run and the relevant project context | United States |
| OpenAI | AI models for the Agent and other platform-provided AI assistance, and the ChatGPT answer engine when CiteLadder supplies the keys | Your instructions, the prompts you run and the relevant project context | United States |
| Google (Gemini) | The Gemini answer engine when CiteLadder supplies the keys | The prompts you run and the relevant project context | United States |
| DataForSEO | Google AI Overview and search intelligence data when CiteLadder supplies the account | Search queries, locations and domains you configure | Estonia (provider’s registered office) |
| Resend | Sending account emails: sign-in and verification links, password resets and workspace invitations | The recipient’s email address and the message | United States |
| Keenable | Web research for brand and competitor discovery | Research queries such as brand, domain and competitor names | United States |
| Tavily | Web search for commerce competitor research | Search queries such as product and competitor names | United States |
| TypeSafe AI | Quality checks on generated prompt suggestions and on suggested internal links between your website’s pages | For prompt suggestions: your project’s business facts (such as category, offerings, audiences and markets), the topic, the buyer need and the suggested question, never brand or competitor names. For internal links: the title, main heading, URL path, description, page type and a short text excerpt of the crawled pages being compared | United States |
2. Providers you connect
2.1 When you connect a provider under your own credentials, that provider acts under your agreement with it, not as our subprocessor. We send it only the requests you configure or run.
- AI answer engines you set in Providers settings under your own API keys, such as OpenAI, Anthropic and Google Gemini. The Agent always uses the platform providers listed above.
- DataForSEO under your own credentials, for Google AI Overview and search intelligence data.
- Google Search Console, Google Analytics and Bing Webmaster Tools, for the properties you authorise.
- Google sign-in, when you choose it to sign in.
- MCP and API clients you authorise, such as an AI assistant, which receive the data they request under their own terms.
3. Independent service providers
- Resend also delivers messages submitted through the CiteLadder contact form, including your name, email, optional company and message. These enquiries are not stored in the application database or used to subscribe you to marketing.
- Razorpay processes payments as an independent payment provider under its own terms. We never receive full card details.
- Google Analytics measures website visits only when it is enabled and you accept optional cookies.
4. Changes
4.1 We update this page before adding or replacing a subprocessor. Customers covered by the Data Processing Agreement at /dpa receive notice and can object as it describes.
4.2 Questions about providers: contact@cube27.com.