SignalBraid is a product of Gain Solutions AS, Solheimsgata 11A, N-2000 Lillestrøm, Norway (organisation number 918 479 961). We use a small number of service providers (subprocessors) to run the service. Each is bound by a data processing agreement with obligations that match our Data Processing Agreement.
1. Providers of the service
| Provider | Purpose | Location of processing | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, application runtime, storage and security | Customer data at rest in the EU jurisdiction; request processing on Cloudflare's global network | Data Privacy Framework and Standard Contractual Clauses |
| ClickHouse, Inc. | Analytical database for connected data | An EU region | Not needed for storage; support access under Standard Contractual Clauses |
| Stripe, Inc. | Payments and billing | EU and United States | Data Privacy Framework and Standard Contractual Clauses |
| Amazon Web Services EMEA SARL (Amazon SES) | Email from the SignalBraid application: sign-in, invitations and notices | EU sending region (Ireland) | Standard Contractual Clauses |
| Resend, Inc. | Email from our content system to our own editors | EU sending region; message metadata stored in the United States | Standard Contractual Clauses |
| Gain Solutions AS (Gain.io) | Support portal | European Union | Not needed (same company group, EEA) |
2. Website analytics
These providers are used on signalbraid.com only if a visitor accepts analytics in the cookie banner. They do not process the data you connect to the service.
| Provider | Purpose | Location of processing | Transfer mechanism |
|---|---|---|---|
| Google Ireland Limited (Google Analytics 4) | Website analytics | EU and United States | Data Privacy Framework and Standard Contractual Clauses |
| Ahrefs Pte. Ltd. (Ahrefs Web Analytics) | Website analytics | Outside the EU, including Singapore and the United States | Its data processing addendum |
| PostHog, Inc. (PostHog) | Website analytics | PostHog Cloud, in the region PostHog calls EU; PostHog, Inc. is a United States company, and we do not promise that this data stays in the EU | Its data processing agreement |
3. Providers to be added
We will add the following to section 1, and give notice as in section 5, before they receive data from the service: Amazon Web Services EMEA SARL for the nightly off-vendor backup copy; and our error-monitoring and uptime-monitoring providers, which can receive technical data such as IP addresses and error context.
4. Platforms you connect are not subprocessors
Platforms you connect as a source, for example Google, Meta, Microsoft, Klaviyo, Shopify, HubSpot and Salesforce, hold their own data under your agreement with them. SignalBraid reads from them on your instruction. They are not in the lists above.
5. Changes to this list
We will tell customers by email at least 30 days before a new subprocessor starts to process customer data, and we record the change on this page. A customer who has a reasonable data-protection objection can raise it with privacy@signalbraid.com within that period; the Data Processing Agreement, section 6, says what follows.
6. Contact
Gain Solutions AS · Solheimsgata 11A · N-2000 Lillestrøm · Norway · privacy@signalbraid.com