Subprocessors
Two companies touch anything on our behalf. Neither of them ever receives the text a rule matched, because the console does not receive it either.
In effect from 13 October 2026
- 01
Hosting and database
Our hosting provider runs the console, the API the extension talks to, and the database behind them. It therefore holds everything the console holds: accounts, organizations, rules, devices and events.
- 02
Email delivery
Our email provider delivers sign-in codes, alerts and summaries. It sees the recipient's address and the contents of those messages — which are the rule, the action, the site and the time, never the matched text.
- 03
No AI vendor
Describing a rule in plain words and having it drafted for you runs on the machine in front of you. No prompt, no rule and no sample text is sent to a model provider, and there is no AI vendor in this list as a result.
- 04
Signing in with Google
If an administrator chooses to sign in with Google, Google is their own identity provider in that moment and tells us the email address, name and picture on the account. That is a sign-in, not an onward transfer of your organization's data.
- 05
Changes
Before a new subprocessor starts, it appears here. If one does not suit your organization, write to us and say so — we would rather hear it before the change than after.
Questions about any of this go to hello@capsulla.io.