Snapshot 45694
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Sub-processors Last updated: 2026-09-09 Cradle uses the following third-party services to deliver our platform. This page is kept up to date as sub-processors are added or removed. Infrastructure and Core Services Sub-processor Purpose Data Processed Location Google Cloud Platform Cloud infrastructure, compute, storage, database, KMS encryption All Cradle application data Australia, United States Firebase (Google) Authentication, real-time database, web hosting User auth tokens, session data, real-time conversation state United States Google Cloud SQL Relational database Call records, contact data, organisation data United States Google Cloud Firestore NoSQL database, real-time data Application data, conversation metadata United States Amazon Web Services (AWS) Desktop app hosting and distribution Application binaries (no customer data) United States Telephony Sub-processor Purpose Data Processed Location Twilio Voice calling, call recording, SMS, WhatsApp Call audio, caller/callee numbers, call metadata, messages United States, Australia DIDWW Number provisioning, call routing Call routing data, phone numbers Lithuania (EU) DIDLogic Number provisioning, call routing Call routing data, phone numbers United States 2Talk Limited Local NZ carrier, SMS delivery (NZ) Call routing data, message content, sender and recipient numbers New Zealand 2Talk Pty Limited Local AU carrier Call routing data Australia TollFreeForwarding Number provisioning, call routing Call routing data, phone numbers United States AI and Transcription Sub-processor Purpose Data Processed Location AssemblyAI Voice transcription of call recordings and voicemails Call audio, transcription data United States Google Vertex AI (Gemini) Call and voicemail summaries, CRM engagement notes, report insights, AI chat Transcript text, report aggregates, chat messages, conversation context United States Google Cloud Text-to-Speech (Gemini TTS) Voice-menu and greeting audio synthesis Voice-menu scripts (text), style prompts, generated audio United States Business Operations Sub-processor Purpose Data Processed Location Stripe Payment processing (card) Billing details, payment card data (PCI DSS compliant) United States GoCardless Payment processing (direct debit) Customer name, bank account details, billing amounts United Kingdom Xero Accounting Customer names, billing addresses, invoice and payment records Australia, New Zealand HubSpot CRM, customer support, analytics Contact names, emails, support interactions, website analytics United States SendGrid (Twilio) Transactional email Email addresses, notification content United States Slack Customer support escalation Chat messages, customer names, support context United States Sentry Error monitoring Device info, crash logs (no customer PII) United States Census Reverse ETL, data sync to HubSpot (deprecated 31 March 2026) Customer and usage data synced to CRM United States LogRocket Session recording, UX debugging (end-of-life — use ends 31 July 2026) Obscured DOM interactions, session data (no customer PII) United States Integrations (Customer-Initiated) These services are only accessed when a customer connects their Cradle account to their own account on these platforms: Sub-processor Purpose Data Processed Location HubSpot CRM integration, contact sync, call logging Contact names, phone numbers, call metadata, engagement records United States Xero / XPM Contact sync, call note creation Contact names, phone numbers, call summaries Australia, New Zealand Google Workspace SSO authentication User identity, email address United States Microsoft 365 SSO authentication, presence sync, calendar User identity, presence status, calendar availability United States Vanguard CRM integration, contact sync Contact names, phone numbers, call metadata Australia, New Zealand FYI Document management integration Contact data, engagement records Australia, New Zealand Changes We will update this page when sub-processors are added or removed. Material changes are communicated to affected customers. Last updated: 9 September 2026