Trust-first creator sponsorship marketplace

Subprocessors List

Last updated: March 04, 2026

Note

This list describes third-party subprocessors used to operate ElevateCSX. Some providers are optional and may be marked as “Not used” depending on the pilot deployment configuration.

Overview

A “subprocessor” is a third-party service provider that processes personal data on behalf of ElevateCSX to operate the platform (for example, payment processing or infrastructure hosting). This list is provided for transparency and will be kept up to date for the pilot.

Current subprocessors (MVP)

Some subprocessors are fixed (for example, Stripe for payments). Others depend on the deployment environment used for the pilot (hosting and database). If a category is not used, it will be marked as “Not used”.

Subprocessors

Provider	Purpose	Data categories
StripeIn use	Payment processing (Stripe Connect), escrow funding, payouts, refunds, and dispute handling.	Identity/contact details, payment method data (handled by Stripe), transaction metadata, invoice/receipt details.
Hosting provider (pilot)In use Microsoft Azure	Application hosting, edge delivery, and operational logs for the web app and API.	IP address, request metadata, error/diagnostic logs, account identifiers.
Database provider (pilot)In use Azure Database for PostgreSQL	Managed database hosting for platform data storage and backups.	Account data, agreements, audit logs, consent logs, and payment metadata stored by the platform.
Email provider (transactional)Not used Resend	Transactional email delivery (optional; used for invitations and system notifications when enabled).	Not used.
Error monitoring (optional)Not used Sentry	Error tracking and diagnostics for the API (optional; enabled only when configured).	Not used.
Analytics providerNot used	Not used in the current MVP build (if enabled, this list will be updated).	Not used.

Data processing agreements and safeguards

Where required, we enter into data processing agreements (DPAs) with subprocessors. If personal data is transferred outside the EEA/UK, we rely on appropriate safeguards (for example, Standard Contractual Clauses), as provided by the relevant vendor terms.

Stripe DPA · Stripe Privacy Policy
Resend DPA · Resend Privacy Policy
Sentry DPA · Sentry Privacy Policy
Hosting and database DPAs/terms depend on the pilot vendors shown above. Please refer to the selected vendors’ DPAs and privacy policies.

Changes and updates

If we add or replace a subprocessor that materially affects how personal data is processed, we will update this list and, where required, provide notice via the app.

Contact

If you have questions about subprocessors or data processing, contact support or submit a data request via Account → Privacy & Data.

Terms How it works FAQ Templates Privacy Subprocessors Cookies Pricing & fees Payments risk Content rights Disputes Disclosure Support Transparency Ranking parameters DAC7 reporting

ElevateCSX