# Capacity

Capacity (capacity.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/capacity
- Documents last verified: 2026-10-08
- Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 21 tracked vendors directly, 154 within two hops, 412 within three; 1 tracked vendors rely on it directly, 21 within two hops, 242 within three
- Cite as: Capacity, Third Party Index, https://thirdpartyindex.com/vendors/capacity (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.creovai.com/ | 2026-10-08 | 2026-10-08 |
| Subprocessor list | https://trust.capacity.com/subprocessors | 2026-10-08 | 2026-10-08 |
| Privacy policy | https://capacity.com/privacy-policy/ | 2026-10-08 | 2026-10-08 |
| Terms | https://capacity.com/website-terms-of-use/ | 2026-10-08 | 2026-10-08 |
| Security page | https://capacity.com/security/ | 2026-10-08 | 2026-10-08 |
| Status page | https://capacity.com/status/ | 2026-10-08 | 2026-10-08 |

## Subprocessors (23)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Infrastructure and Hosting; Provides cloud hosting and infrastructure services that support platform availability, storage, processing, and operational performance. | United States, Canada, United Kingdom, Australia | 2026-10-08 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Authentication and identity management; Delivers secure user authentication and identity management for Capacity, enabling access control across the platform. | United States | 2026-10-08 |
| [Bandwidth](https://thirdpartyindex.com/vendors/bandwidth.md) | Supplies voice and SMS telecommunications infrastructure powering AI Agents and Outbound Campaigns.; Voice and SMS delivery | United States | 2026-10-08 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | CDN and edge security; Provides content delivery, edge networking, DDoS mitigation, and web application firewall services across the platform. | United States and global edge network locations | 2026-10-08 |
| [Customer.io](https://thirdpartyindex.com/vendors/customer-io.md) | Enables automated outbound messaging and behavioral-triggered email notifications for Outbound Campaigns.; Outbound customer messaging | United States | 2026-10-08 |
| [Databricks](https://thirdpartyindex.com/vendors/databricks.md) | Data analytics and AI/ML processing; Operates a unified data and AI platform for Capacity, supporting large-scale data engineering, model training, and operational analytics. | United States | 2026-10-08 |
| [Deepgram](https://thirdpartyindex.com/vendors/deepgram.md) (AI model provider: Deepgram) | Converts audio streams into real-time and asynchronous transcripts.; Speech-to-text transcription | United States | 2026-10-08 |
| [DeepL](https://thirdpartyindex.com/vendors/deepl.md) | Cloud provider; Translation service. \*Optional subprocessor.\* | Germany | 2026-10-08 |
| [Elastic Search](https://thirdpartyindex.com/vendors/elasticsearch.md) | Engineering; Provides search, analytics and logging platform services for Capacity. | United States | 2026-10-08 |
| [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs.md) (AI model provider: ElevenLabs) | Enables AI-powered text to speech within Voice AI Agents. \*Optional subprocessor.\*; Engineering | United States | 2026-10-08 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud translation service; Translation service \*Optional subprocessor.\* | EU | 2026-10-08 |
| Luna web | File and document conversion; Handles server-side document and file conversion within Capacity to support content ingestion and knowledge management. | Germany | 2026-10-08 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Delivers transactional and automated emails for AI Agents, including user notifications and correspondence.; Transactional email delivery | United States | 2026-10-08 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud Infrastructure and managed services; Provides IaaS compute, storage, and managed services supporting platform operations and product delivery. | United States, EU | 2026-10-08 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | Engineering; Provides tracking usage events and AI analytics for Capacity. | United States | 2026-10-08 |
| [OneSignal](https://thirdpartyindex.com/vendors/onesignal.md) | Delivers mobile and web push notifications to end users for engagement and alerting within Capacity.; Push notification delivery | United States | 2026-10-08 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Generative AI and LLM processing; Powers large language model inference and generative AI capabilities enabling natural language understanding and generation across AI products. \*Optional subprocessor.\* | United States | 2026-10-08 |
| [Postmark](https://thirdpartyindex.com/vendors/postmark.md) | Sends time-sensitive transactional emails and scheduling notifications for Capacity Scheduling, ensuring reliable delivery of workflow alerts.; Transactional email delivery | United States | 2026-10-08 |
| [Retarus](https://thirdpartyindex.com/vendors/retarus.md) | Cloud provider; Delivers transactional and automated emails including user notifications and correspondence. \*Optional EU subprocessor.\* | Switzerland | 2026-10-08 |
| [Retell AI](https://thirdpartyindex.com/vendors/retell-ai.md) | Conversational voice AI; Enables AI-powered voice agent capabilities and real-time conversational AI. | United States | 2026-10-08 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | Cloud provider; Delivers transactional and automated emails, including user notifications and correspondence. | United States | 2026-10-08 |
| Swisscom DCS+ | Provides cloud hosting and virtual datacenter infrastructure supporting the Starmind knowledge-network environment within Capacity. \*Optional EU subprocessor.\*; Virtual datacenter and cloud hosting | Switzerland | 2026-10-08 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | Delivers programmable SMS, MMS, and voice communications enabling real-time customer engagement across Scheduling, AI Agents and Outbound Campaigns. \*Optional subprocessor for scheduling.\*; SMS and voice communications | United States and global carrier network locations | 2026-10-08 |

Read from ([evidence](https://thirdpartyindex.com/evidence/62912)). CSV: https://thirdpartyindex.com/vendors/capacity/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

## Web Technologies

Capacity's homepage made 106 requests to 15 domains, and 7 services controlled by another company. Loaded on 2026-10-08 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### Third parties (7)

- Google Cloud: 13 requests to gstatic.com, google.com, googletagmanager.com, doubleclick.net, fonts.googleapis.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- TrustArc: 12 requests to trustarc.com; TrustArc
- HubSpot: 4 requests to hsforms.com, hsforms.net
- NitroPack: 1 request to getnitropack.com; NitroPack
- Split Hero: 1 request to splithero.com; Split Hero
- Unbounce: 1 request to ubembed.com; Unbounce
- Vimeo: 1 request to vimeocdn.com

### First party (1)

- Capacity: 73 requests to capacity.com, aisoftware.com, aisoftware-dev-abyss.s3.amazonaws.com; AdRoll 2.0, Amazon S3, Amazon Web Services, Chosen, Cloudflare, Divi, FitVids.JS, Google Font API, HTTP/3, HubSpot, HubSpot Analytics, HubSpot WordPress plugin 11.3.75, LazySizes, Linkedin Insight Tag, MySQL, Open Graph, PHP, RSS, React, React Router 7.18.1, Site Kit 1.189.0, Swiper, WP Engine, WordPress, Yoast SEO, jQuery 3.7.1, jQuery Migrate 3.4.1, jQuery UI 1.13.3, reCAPTCHA

4 tracked companies loaded by the homepage are not in Capacity's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics.md): Speech-to-text data collection.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api