Subprocessors

Overview

Corenth Technologies LLC uses third-party service providers to support hosting, databases, authentication, payments, artificial intelligence, transactional email, scheduling, customer relationship management, and related platform operations.

A provider may process personal information or Customer Data on behalf of Corenth Technologies. Where a provider processes Customer Personal Data on Corenth's behalf, that provider may qualify as a subprocessor under an applicable customer agreement or data-protection law.

Not every provider receives every category of information, and not every provider acts as a subprocessor for every activity. Some providers may act as independent controllers or in another legal capacity for certain processing.

What Is a Subprocessor?

A subprocessor is generally a third party engaged by a processor to process personal information on behalf of a business customer.

Whether a particular provider is legally considered a subprocessor depends on factors including:

• The service the provider performs.
• The information the provider receives.
• The purpose for which the information is processed.
• Whether Corenth or the customer determines the relevant processing instructions.
• The applicable agreement and privacy or data-protection law.

Certain providers, particularly payment and identity providers, may act in multiple legal capacities for different activities.

Active Providers

The following material providers currently support Corenth Technologies' production Service.

Customer Support Data

Corenth Technologies does not currently use a separate third-party help-desk or customer-support ticketing provider.

Support tickets submitted through the customer dashboard are handled through the Corenth Technologies application and stored through the applicable Corenth backend and Supabase infrastructure.

Support information may include the customer's name, account or organization information, email address, message, troubleshooting details, and other information the customer chooses to submit as part of a support request.

Corenth may also communicate with customers by email regarding support matters. Where transactional email is sent through Resend, the information required to deliver that communication may be processed by Resend.

Analytics and Tracking

Corenth Technologies does not currently identify Google Analytics as an active production provider.

Corenth may use technical logs, application records, provider dashboards, and operational information necessary to secure, operate, troubleshoot, and maintain the Service.

If Corenth later activates a material third-party analytics, advertising, behavioral-tracking, or external monitoring provider that processes Customer Personal Data or visitor information, Corenth will update the applicable privacy and cookie disclosures and this provider register as appropriate.

Provider Due Diligence

When evaluating a material provider that may receive Customer Personal Data, Corenth Technologies considers factors appropriate to the nature of the service, including:

• The service performed and whether Customer Personal Data is necessary for that service.
• The categories and sensitivity of information processed.
• The provider's contractual privacy and security obligations.
• Available security documentation and control descriptions.
• Provider retention, deletion, and account-configuration options.
• Provider treatment of customer information, including AI or product-improvement uses where relevant.
• Processing regions, support locations, and international transfers.
• Incident-notification and cooperation obligations.
• Downstream provider or subprocessor transparency where available.
• Configuration options that can reduce unnecessary data collection or processing.

The scope and depth of review may vary depending on the sensitivity of the information, nature of the processing, provider documentation available, contractual requirements, customer requirements, and the role of the provider.

Provider Changes and Notifications

Corenth Technologies may add, replace, or remove providers as the Service, architecture, functionality, customer needs, legal requirements, and provider availability change.

When a material provider begins processing Customer Personal Data on Corenth's behalf, Corenth may, as appropriate:

• Review the provider and applicable service.
• Document the provider's role and processing purpose.
• Review available privacy, security, contractual, retention, and international-transfer information.
• Update this provider register within a reasonable period.
• Provide advance or other notice when required by an applicable agreement or law.

Removal of a provider does not necessarily result in immediate deletion of all information from provider-managed backups, logs, billing records, security records, or legally required archives.

Customer Objections

If a binding Data Processing Addendum or other applicable customer agreement provides a right to object to a new subprocessor, the customer may submit a written objection in accordance with that agreement.

An objection should identify:

• The affected customer and agreement.
• The provider involved.
• The specific data-protection concern and affected processing.
• Any other information required by the applicable agreement.

Corenth Technologies and the customer may attempt to address a valid concern through additional information, configuration changes, reduced processing, additional safeguards, alternative services where reasonably available, or another remedy provided by the applicable agreement.

An objection does not automatically require Corenth Technologies to discontinue a provider where the applicable agreement does not require that result or where no commercially reasonable alternative is available.

International Transfers

Corenth Technologies is based in the United States, and its providers may process information in the United States and other countries where they, their affiliates, support teams, or infrastructure operate.

Where applicable data-protection law requires an international-transfer safeguard, Corenth Technologies and the applicable provider may rely on an appropriate lawful mechanism, which may include:

• An applicable adequacy decision.
• European Commission Standard Contractual Clauses where appropriate.
• A United Kingdom International Data Transfer Agreement or applicable UK Addendum where appropriate.
• Another legally recognized international-transfer mechanism.

A particular mechanism applies only where relevant to the processing activity and where the required contractual and legal conditions are satisfied.

Provider processing locations and transfer arrangements may change as providers modify infrastructure, support operations, corporate structure, contractual terms, or service architecture.

Customer-Selected Integrations

Customers may choose to connect Corenth Technologies with external CRM, scheduling, marketing, communications, storage, analytics, payment, automation, or other third-party services.

A customer-selected provider may not be a Corenth Technologies subprocessor when:

• The customer independently selects the provider.
• The customer authorizes the connection.
• The customer's own agreement with the provider governs the relevant processing.
• Corenth merely facilitates transmission or functionality at the customer's direction.

Customers are responsible for reviewing the privacy, security, legal, retention, and contractual terms of third-party services they independently use outside Corenth and enable.

Corenth Technologies may restrict, suspend, or disable an external service or customer configuration that creates a security, privacy, legal, operational, technical, or platform risk.

Customer Responsibilities

Customers remain responsible for:

• Determining whether the Service and applicable providers are appropriate for their intended use.
• Providing legally required privacy notices and obtaining required permissions or consent.
• Submitting only information they are authorized to collect, use, and process.
• Avoiding unsupported sensitive or regulated information.
• Reviewing independently selected external services and provider terms.
• Configuring account permissions, AI features, workflows, and data collection appropriately.
• Contacting Corenth Technologies before beginning a use that requires customer-specific contractual, security, localization, or regulatory protections.

Customers with specific data-residency, localization, regulated-data, vendor, industry, or security requirements should raise those requirements before purchasing or enabling the affected functionality.

Contact Information

Questions about providers, subprocessors, international transfers, customer-data processing, or provider objections may be sent to:

This is Corenth Technologies LLC's business mailing address and should not be interpreted as a public office, retail location, or walk-in customer-service center.

A provider-related request should identify the customer, organization, relevant provider, applicable agreement, and specific privacy or data-protection concern where applicable.