Sub-processors

Last updated: September 8, 2026

Brightyard, Inc. ("Brightyard") uses the third parties listed on this page to help deliver Coherence. A sub-processor is a third party that processes Customer Data on our behalf under our Data Processing Addendum. Each sub-processor is bound by written terms that require it to protect Customer Data to a standard no less protective than the one we commit to.

Where your data lives

Customer Data is hosted in the United States. Connected email, calendar, and contact data is stored in the same region. An EU hosting region is on our roadmap; Team customers with a committed contract can ask us to schedule it by contacting [email protected]. Workspaces that require all AI processing to stay in the United States should select Anthropic or OpenAI as their AI provider in Settings; that choice applies to every AI feature.

Infrastructure and platform

Sub-processorPurposeData processedLocation
DigitalOcean, LLCCloud hosting, managed PostgreSQL database, cache, object storage for uploaded files, and backups.All Customer Data stored in the Service.United States (New York)
Cloudflare, Inc.DNS, content delivery, and traffic protection in front of the application and public API.Request metadata and Customer Data while in transit.Global edge network; United States headquartered
Expo (650 Industries, Inc.)Delivery of push notifications to the Coherence mobile app.Device push tokens and notification text.United States

AI model providers

AI features send the prompt and the workspace context relevant to a request to the model provider selected for your workspace. The default provider is MiniMax. Workspace owners can select Anthropic or OpenAI instead under Settings; that choice applies to every AI feature, including content, site, and image generation, after which no Customer Data is sent to MiniMax. Anthropic and OpenAI may not use Customer Data to train their models under our agreements with them. MiniMax is used under its published terms, summarised below. Workspaces in the European Economic Area, the United Kingdom, or Switzerland never use MiniMax: for them the default setting runs only on Anthropic and OpenAI, and MiniMax cannot be enabled.

Sub-processorPurposeData processedLocation
MiniMax (Nanonoble Pte. Ltd.)Default AI model provider for chat, agents, content, and image generation unless the workspace selects another provider. Its terms permit it to use API inputs and outputs to provide, maintain, develop, and improve its services, and to commercially use a de-identified database; its EU AI Act training summary states API prompts were not used to train the M3 model.Prompts, image prompts, and workspace context relevant to a request.API data stored in the United States; operating company in Singapore, within a group headquartered in China
Anthropic, PBCAI model provider (Claude models). Available as the workspace default.Prompts and workspace context relevant to a request.United States
OpenAI, L.L.C.AI model provider (GPT models), speech-to-text transcription, and image generation. Available as the workspace default.Prompts, workspace context, audio submitted for transcription, and image prompts.United States
DeepAI, Inc.Image generation for marketing and site content.Image prompts.United States
Recraft, Inc.Image and vector graphic generation for brand assets and site imagery.Image prompts and brand text.United States
Gamma Tech, Inc.Presentation and slide deck generation.The outline and content supplied for a deck.United States

Search, research, and location

Sub-processorPurposeData processedLocation
Exa AI, Inc.Web research for AI agents and lead discovery.Search queries, which may include company names and topics from your workspace.United States
Brave Software, Inc.Web search for AI agents.Search queries.United States
SerperWeb search results for AI agents and citation checking.Search queries.Operates globally; transfers outside the EEA possible
Google LLC (Google Places)Address autocomplete in the web and mobile apps, and server-side geocoding when a workspace selects Google as its address provider.Address text typed into address fields.United States
OpenStreetMap Foundation (Nominatim)Default server-side geocoding of saved addresses.Address text entered in address fields.United Kingdom and European Union

Communications, billing, and monitoring

Sub-processorPurposeData processedLocation
Postmark (ActiveCampaign, LLC)Transactional and system email such as invitations, notifications, and password resets, and campaign sending where Coherence is the sender.Recipient names, email addresses, and message content.United States
Stripe, Inc.Subscription billing and payment processing.Billing contact details and payment information. Card data is handled by Stripe only.United States
Functional Software, Inc. (Sentry)Application error monitoring.Technical error data, which may include user identifiers and request metadata.United States
PostHog, Inc.Product analytics.Usage events, user identifiers, and device information.United States

Integrations you enable

The services below are not sub-processors. When you connect one of them, you authorise Coherence to exchange data with your own account on that service, and that service processes the data under its own terms and privacy notice. You can disconnect any of them at any time from Settings.

  • Google Workspace (Gmail, Google Calendar, Google Contacts, Google Meet)
  • Microsoft 365 (Outlook mail, calendar, and contacts)
  • LinkedIn
  • X (Twitter)
  • Reddit
  • Zoom
  • GitHub
  • Medium
  • Resend and SendGrid, when you connect your own sending account for email campaigns
  • Any connector you configure in Automations

Changes to this list

We give every customer at least 30 days' written notice before a new sub-processor begins processing Customer Data, by email to the owner and administrator accounts of the workspace, and we update this page at the same time. To add further recipients for those notices, write to [email protected] with the subject "Sub-processor updates". Your rights to object to a new sub-processor are set out in the Data Processing Addendum.

Questions

For questions about a sub-processor or about data protection generally, contact [email protected]. Our full Privacy Policy and Security pages describe how we protect your data.