Subprocessor List

Subscribe to change notifications

Amazon Web Services, Inc.

All primary infrastructure: PostgreSQL (RDS), object storage (S3), queues (SQS), transactional email (SES), Lambda (Remotion video rendering), CloudWatch (metrics/logs) – USA (us-east-1)

Stripe, Inc.

Billing contact, email, payment method (tokenized) – USA

OpenAI, L.L.C.

LLM prompts and customer-submitted content – USA

Anthropic, PBC

LLM provider. – USA

OpenRouter, Inc.

LLM provider. Routes requests to model providers. – USA

Google LLC

(a) Vertex AI / Gemini for image and text generation; (b) Cloud Vision for image analysis; (c) Google Analytics via gtag on app.copley.com (production-only) – USA

Twelve Labs, Inc.

Video content submitted for analysis – USA

Eleven Labs, Inc.

AI voice, speech and music generation; Text, music prompts and content submitted for audio generation; voice/audio configuration metadata – USA

Black Forest Labs GmbH

Image prompts and reference images – Germany

Runware Ltd

Image and video generation prompts and reference images – United Kingdom

Mendable AI, Inc. (Firecrawl)

URLs submitted by customer for competitive analysis – USA

n8n GmbH

Image-generation prompts and reference image URLs routed through Copley's n8n workspace – Germany / EU

ScrapeCreators

Instagram/YouTube handles and video IDs to scrape competitive content – USA

Freckle.io, Inc.

Contact enrichment: contact details submitted for enrichment and the enrichment results returned – USA

Klaviyo, Inc.

Copley user engagement events: tenant-owner email, tenant company name, event metadata (e.g., "Creative Report Created"). Distinct from the per-tenant Klaviyo integration (which is customer-controlled, not a subprocessor). – USA

HubSpot, Inc.

Marketing and analytics tracking on copley.com. – USA

Automattic, Inc. (Gravatar)

SHA-256 hashes of authenticated user email addresses for avatar lookup – USA

FullStory, Inc.

User interactions on app.copley.com, authenticated user email, user ID, role, IP address, user-agent – USA

Meta Platforms, Inc.

Page-view events, IP, user-agent, cookies (Facebook Pixel, production-only, fires on app.copley.com including authenticated pages) – USA

LinkedIn Corporation

Page-view events, IP, user-agent, cookies (Insight Tag, production-only, fires on app.copley.com including authenticated pages) – USA

Wistia, Inc.

Video viewer behavior, IP, user-agent (player loaded globally on all app pages) – USA