Subprocessors
Third-party operators that process personal information on behalf of Blancor Intelligence. Listed in alignment with POPIA §21(2) (operator obligations).
Last updated: 17 October 2026
| Operator | Purpose | Data processed | Region | Governing basis |
|---|---|---|---|---|
| Anthropic | AI inference (Claude models) | CRM content (outbound prospect records) when AI features are invoked | United States | Anthropic API Terms; API Data Usage Policy; POPIA s.72 |
| Supabase | Database, authentication, row-level security | CRM data: outbound prospect and pipeline records | EU (eu-west-1, Ireland) | Supabase DPA; POPIA s.72(1)(a) |
| Vercel | Web hosting (website and internal dashboard), serverless functions (internal dashboard), edge network | All HTTP traffic, server logs, function invocations | United States | Vercel DPA (binds via the Agreement; Schedule 3: EU SCCs + UK IDTA) |
| Google Workspace | Email, Calendar, Meet | Email correspondence and calendar events | European Union / United States | Google Workspace DPA |
| Formspree | The /evaluate self-assessment stopped sending to Formspree on 5 September 2026 (commit 7d8c43c) and was removed from the site on 30 September 2026 (commit 3a3bc20). Any submissions it received remain with Formspree until deleted. | Name, email, company, industry, team size, stated operational pain | United States | Formspree Terms of Service and Privacy Policy only |
| Outbound prospect research; public profile data | Public professional profile data (not website visitors) | United States | LinkedIn API Terms; public data only | |
| Cloudflare | DNS, content delivery, DDoS protection | IP addresses, request metadata | Global | Cloudflare DPA v6.4 (Self-Serve Subscription Agreement; EU SCCs Module Two; DPF-certified) |
| GitHub | Source-code hosting | Private repositories may hold business contact data | United States | GitHub Terms of Service; GitHub Privacy Statement |
| Telegram | Internal founder briefs and reminders (daily pipeline brief, outreach and follow-up nudges) | Prospect names, companies and pipeline status in internal messages to the founders | Global | No DPA; Telegram Privacy Policy only |
| WhatsApp (Meta Platforms) | Inbound contact channel via wa.me links | Phone number, WhatsApp profile name, message content | Processed by Meta outside South Africa | Meta processes under its own terms as a third-party communication channel; Blancor has no data processing agreement with Meta |
We update this list whenever we add or remove an operator. Material changes are reflected in the "Last updated" date above. If a change affects how your personal information is processed, we will notify you in accordance with our Privacy Policy.
Where an operator processes personal information outside South Africa, we rely on the adequacy or safeguard mechanisms permitted by POPIA §72.
WhatsApp (Meta Platforms) is listed for transparency. It is a third-party communication channel that processes messages under Meta's own terms. It is not an operator acting on our behalf, and Blancor has no data processing agreement with Meta.
Questions? Email the Information Officer at [email protected].