1. What is a subprocessor?
BossBack relies on specialist providers to operate parts of the service. A subprocessor or service provider may process customer or end-user information for a limited operational purpose such as hosting, security, email, or AI processing.
2. Current service providers
Swipe horizontally to view the full table.
| Provider | Purpose | Information involved | Location / note |
|---|---|---|---|
| OVHcloud | VPS hosting, storage, and backups. | Customer accounts, Sources, Answers conversations, configuration, and application data stored by BossBack. | BossBack’s primary VPS is in Canada. Daily server backups are configured with up to 7-day retention. |
| Cloudflare | DNS, network delivery, TLS edge services, traffic protection, and security. | IP addresses, network/request metadata, security signals, and transmitted content as necessary to deliver the service. | Cloudflare operates a global network; processing location varies with routing and configuration. |
| Authentication through Sign in with Google. | Basic Google Account profile information made available for authentication, such as name, email address, and profile picture. | Processing location depends on Google service infrastructure and account routing. | |
| Microsoft | Authentication through the Microsoft identity platform, plus business email and contact-form delivery through Microsoft 365 / Microsoft Graph. | Account sign-in identifiers and basic profile claims made available for authentication, plus contact form fields and email/support correspondence. | Processing location depends on the Microsoft service, account or tenant configuration, and network routing. |
| OpenAI | AI API processing for BossBack Answers. | End-user questions, relevant conversation context, and approved business information needed to generate a response. | OpenAI may process data in the United States or other service locations. API content is not used to train OpenAI models by default; default abuse-monitoring retention may be up to 30 days. |
3. Not yet active
BossBack may add providers as the service evolves. Stripe is the preferred payment provider for paid subscriptions but is not currently active for customer payment processing. Google and Microsoft authentication are already active and are listed above.
4. Changes to subprocessors
Providers may be added, replaced, or removed as BossBack grows. This page will be updated when a material provider is added or its role changes. Customers with contractual notification rights will receive any additional notice required by their agreement.
5. Questions
Questions about a provider or how BossBack handles customer data can be sent to [email protected].