Sub-processors

Last updated: October 12, 2026

Clariva uses the third-party service providers below to deliver the service. Each one processes customer data only as needed for the purpose stated, under contract with us. All are located in the United States.

Current sub-processors

ProviderPurposeData accessed
Google Cloud PlatformApplication hosting, database, file storage, reporting, and mobile push notification delivery (Firebase Cloud Messaging)All customer data; device push tokens and notification content
Google reCAPTCHA EnterpriseTelling real browsers apart from automated abuse, on the AI assistant and on customer payment pages (via Firebase App Check)Browser and device signals and the page in use; Google may set its own cookies for this purpose
StripePayment processing for Clariva subscriptions and for customer-accepted paymentsBilling contact details and payment metadata. Card numbers go directly to Stripe and never reach Clariva.
AlgoliaSearch indexing, so records are findable across the applicationSearchable record fields — names, numbers and descriptions, including contact, vendor and staff-user names, email addresses and phone numbers
ResendTransactional email delivery — invoices, quotes, notifications — and receiving replies sent to Clariva inbound addressesSender and recipient email addresses, message content and attachments
SentryError monitoring, performance monitoring and diagnosticsTechnical error and performance data, including the page address in use, which may incidentally include identifiers present in a failing request. Session recording is not used.
Intuit (QuickBooks Online)Accounting synchronization — only where a customer connects itCustomer, invoice and payment records selected for sync
Google Cloud Vertex AI (Gemini)The in-product AI assistant, suggestions (bulk-import field mapping; record and next-step suggestions in the browser extension and Outlook add-in), and triage of support requests you send usThe content of your questions, attached images, and the records needed to answer them; spreadsheet column headings and sample values; the email or page details the extension or add-in reads when you use it; the content of support requests, including attached screenshots and diagnostic logs
Google Maps PlatformAddress suggestions, geocoding and map displayAddresses entered for accounts, ship-to locations, warehouses and vendors, including text typed into address fields
ApplePush notification delivery and app integrity checks for the iOS appDevice push tokens, notification content and device attestation data
Google PlayApp integrity checks for the Android appDevice attestation data

AI and your data

Content you send to the in-product assistant is used to answer your question, content used for a suggestion is used only to make that suggestion, and the content of a support request you send us is used to help our team triage and answer it. None of it is used to train any third-party model. AI features run on Google Cloud Vertex AI in the United States, under Google Cloud's data-processing terms. Suggestions are always shown to a person to accept or change, and AI suggestions on support requests are reviewed by a person before anything is changed or sent. Feedback you give on an assistant answer is reviewed by us to improve the product, and is deliberately kept out of model training; see our Privacy Policy for when a rated conversation is kept with a support request.

Changes to this list

We will update this page at least 30 days before a new sub-processor begins processing customer data. If you would like to be notified of changes, email support@caringconsulting.co and we will add you to the notification list.

This list is incorporated into our Data Processing Addendum, which commits us to updating it at least 30 days before a new sub-processor begins processing customer data.

See our Privacy Policy for how we handle personal data generally, and our Security page for the controls that protect it.