Sub-processors
Last updated: June 2026
This page lists the third-party sub-processors SimpleAudit™ engages to process personal data on behalf of our customers and partners. It is the authoritative, always-current version of the sub-processor list referenced in our Privacy Policy and our Data Processing Agreement. Each sub-processor processes data only as necessary to provide its service.
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Clerk | Authentication, user management, billing | Name, email, session tokens, payment info | United States |
| Microsoft Azure | Hosting, database, file storage | All application data (encrypted at rest and in transit) | United States (East US, Central US) |
| Stripe | Payment processing (via Clerk Billing) | Billing address, payment method, transaction history | United States |
| Google Analytics | Website analytics (consent required) | Page views, device info, IP address (anonymized) | United States / global |
| Google Ads | Advertising conversion tracking (marketing consent required) | Conversion events, hashed email, advertising identifiers | United States / global |
| Azure Communication Services | Transactional email | Email address, email content | United States |
| Azure AI Foundry (hosts OpenAI and Anthropic models) | AI-powered compliance guidance | Compliance data context (policies, risks, vendors) for AI processing — processed by Microsoft as data processor, not shared with the model providers, and not used for model training | Azure regions; some processing may occur outside the United States |
| Azure Monitor (Application Insights) | Server-side telemetry and error monitoring | Performance metrics, error traces, request timing (no personal data) | United States |
Our AI features run through Microsoft Azure AI Foundry, which hosts the OpenAI and Anthropic models we use. Microsoft acts as the data processor: prompts and outputs are processed within Microsoft's Azure environment, are not shared with the model providers, and are not used to train any models. For the governing terms, see Microsoft's Azure AI Foundry data-privacy documentation and the Microsoft Products and Services Data Protection Addendum.
Changes to this list
We provide advance notice of material changes to our sub-processors so that customers and partners have a reasonable opportunity to review them. To request notification when this list changes, contact privacy@simpleaudit.io.