These providers support the Neon Deer platform at app.neondeerdata.com, our website at neondeerdata.com, and the business services identified below. Platform subprocessors act on our behalf for the tasks listed. Website vendors, payment providers, and customer-connected services are listed separately because their roles differ. Our DPA governs authorization and changes to platform subprocessors; our Privacy Policy explains our broader handling of personal data.
Locations identify primary hosting or the provider's processing footprint. Providers may also use support teams and subprocessors in other countries; these entries do not promise exclusive data residency.
Platform hosting, sign-in, AI, and communications
| Provider | Purpose | What it receives | Location |
|---|---|---|---|
| Neon (Databricks) | Platform database | CRM records, workflow lookup values, account information, and other platform data | United States (Northern Virginia) |
| Hetzner | Application hosting | Platform requests and data while processed, plus server logs that can include user and workspace identifiers | Ashburn, Virginia, United States; EU support |
| Cloudflare | Traffic delivery and protection | Platform traffic, IP addresses, browser information, and sign-in security signals | Worldwide edge network |
| Clerk | Sign-in and accounts | Name, email address, sign-in details, sessions, and organization memberships | United States |
| Anthropic | AI assessments | CRM fields, permitted related-record information and notes sent for assessment, and generated responses | United States storage; processing in the United States, Europe, Asia and Australia, with support, safety review and incident response in countries where Anthropic or its affiliates operate; no exclusive residency commitment |
| OpenAI (OpenAI OpCo, LLC) | AI assessments | CRM assessment inputs and outputs | United States and other countries in OpenAI’s subprocessor schedule; no exclusive residency commitment |
| Google LLC (Gemini API Paid Services) | AI assessments | CRM assessment inputs and outputs | Countries where Google or its agents maintain facilities; no exclusive residency commitment |
| Sentry | Error monitoring | Filtered error reports and diagnostic information; filtering does not guarantee removal of all personal data | United States storage; Austria, Canada, and Netherlands service/support |
| Postmark | Notification email | Recipient addresses, email content, and delivery information | United States |
Our domain-check service
Checkredirects.io is operated by Neon Deer Data Labs Inc., the same legal entity as this platform. It receives company website domains and non-personal-email-provider domains from CRM email addresses to check redirects. It does not receive complete email addresses or CRM records for these checks. Websites contacted during a check receive the requested address and the checking service’s connection information. Its primary hosting and storage are in Virginia, United States. Any separate providers processing this information for us remain subject to the DPA's subprocessor requirements. Privacy policy.
Merchant of record
Polar is the merchant of record and authorized reseller for platform subscriptions. It handles checkout, payments, subscription billing, and applicable sales taxes. Purchases are subject to Polar's buyer terms and privacy policy; Neon Deer provides the platform.
| Provider | Purpose | What it receives | Location |
|---|---|---|---|
| Polar | Merchant of record | Purchaser, billing, subscription, and invoice information; payment details supplied at checkout | United States |
Consulting payments
We use Stripe to issue consulting invoices and process payments for consulting services. Stripe receives the customer contact, billing, invoice, and transaction information needed to provide these services, along with payment details supplied when paying. See Stripe’s Privacy Policy.
Website providers
| Provider | Purpose | What it receives | Location |
|---|---|---|---|
| Plausible Analytics | Website analytics | Page URL, referrer, browser/device information, and IP address used to derive visit statistics; no cookies | EU (Germany) |
| Rampify | Website analytics | Browser visits and referrals, with a temporary session identifier; automated-traffic request details without the visitor IP address being forwarded | Not published by provider |
| Netlify | Website hosting and form processing | Website request information, including IP address, browser type, referrer, and requested path; native form submissions and accompanying campaign information | Worldwide edge network; serverless functions in Ohio, United States |
| Fillout | Embedded forms and backup form delivery | Information submitted through embedded forms and browser or device information when those forms load; backup copies of native form submissions and accompanying campaign information | United States |
| Cal.com | Meeting scheduling | Name, email address, meeting time, and booking details; IP address and browser request information when an embedded calendar loads | United States |
| YouTube | Embedded videos | Browser request information when a video loads; viewing data when a visitor plays a video | Worldwide |
| Google Fonts | Website font | IP address and browser information when the font loads | Worldwide |
Customer-selected destinations
Customers authorize us to access and update records in their Attio accounts. Attio provides its CRM under a separate agreement with the customer and is not our subprocessor for that service. Details of Attio's data handling are in its Privacy Policy and Data Processing Addendum.
Changes to this list
- October 1, 2026: Clarified browser request information received by embedded Cal.com calendars.
- October 1, 2026: Clarified embedded forms and backup delivery of native submissions through Fillout.
- October 1, 2026: Clarified website hosting and native form processing by Netlify.
- September 30, 2026: First publication of this list, covering the Neon Deer platform (app.neondeerdata.com) and neondeerdata.com.
We email notice of new or replacement platform subprocessors as required by the DPA. Updating this page alone does not replace that notice.
Contact
DPA matters: legal@neondeerdata.com. Privacy requests: privacy@neondeerdata.com.