Atlas uses the providers below to operate its website and deliver Services to individual and business customers in the United States. A provider is a subprocessor where it processes Client Personal Data on Atlas's behalf within a processor or service-provider relationship under applicable law. Some providers process only Atlas website or account information and are listed for transparency even when they are not a subprocessor for a particular customer. An individual subscription does not by itself establish a statutory controller or processor relationship.
| Provider | Purpose | Information | Use |
|---|---|---|---|
| OpenAI API | AI-assisted business research, content generation, review, and repair | Authorized Client Materials, business and website information, prompts, drafts, output, and workflow metadata | Client services |
| n8n | Workflow automation, lead routing, business research, scoring, reporting, and service operations | Allow-listed form data, workflow events, authorized business and workspace information, and service data | Website and client services |
| Stripe | Checkout, payment-method storage, subscriptions, billing administration, and billing-portal functions | Contact, billing, payment-method, customer, and transaction information | Account and billing |
| Gmail (Google) | Operational email in subscription workflows | Configured email addresses, message content, and delivery metadata | Subscription-workflow notifications |
| Google sign-in | Optional third-party account authentication | Identity, email, profile, authentication, and authorization information made available through the chosen sign-in flow | Account access when Google sign-in is selected |
| Google Places | Address autocomplete and validation assistance | Address search text, place IDs, and request metadata | Optional form assistance |
| YouTube (Google) | Site and course video hosting and playback | Video request, network, device/browser, and playback metadata | Site and course delivery via privacy-enhanced embeds |
| Supabase | Authentication, database and file storage, workspace and service records, and Crash Course progress synchronization | Account and authentication information, workspace membership and permissions, authorized business information and content, uploaded assets, course identity and lesson state, timestamps, and request/security metadata | Website course delivery and client application services |
| Cloudflare | Edge delivery, security, and abuse prevention, including configured Turnstile verification | Request, device, network, and security metadata | Website and application infrastructure |
| DigitalOcean | Production application hosting and infrastructure | Hosted application and service data, logs, network and security metadata, and configured backups | Application infrastructure |
| Sentry | Application error and reliability monitoring | Error diagnostics, stack traces, release and environment identifiers, and technical/request metadata | Application operation and troubleshooting |
| Google Analytics | Website usage analytics | Clean page path, clean referrer, device/browser metadata, analytics identifiers, and interaction data | Optional; requires Accept All |
| Google Ads | Visibility Checkup conversion measurement | Approved Google click identifiers on the landing page; a clean success-page location and referrer; device/browser metadata, advertising identifiers, and consent state; no submitted form values | Optional; requires Accept All and the exact reviewed landing or clean success route; ad-personalization signals disabled |
| Meta | Advertising measurement and audience building | Eligible page, referrer, device/browser, advertising, and event metadata | Optional; requires Accept All and route eligibility |
| Advertising measurement and audience building | Eligible page, referrer, device/browser, advertising, and event metadata | Optional; requires Accept All and route eligibility | |
| OpenAI Ads | Advertising and conversion measurement | Eligible page, referrer, device/browser, attribution, and approved event metadata | Optional; requires Accept All and route eligibility |
The names above identify the technologies and services used. Some components, including n8n and Supabase components, may operate on Atlas-managed infrastructure. Using self-hosted software does not by itself mean its publisher receives Client Personal Data; the infrastructure operator's role depends on the actual deployment. A provider's role also depends on the processing: a payment or sign-in provider may have independent obligations for information it processes for its own purposes. The applicable DPA governs processing on Client's behalf.
Client-Specific Providers
An Order may authorize a client-selected hosting, publishing, analytics, content, or infrastructure provider that is not part of Atlas's standard stack. When that provider processes Client Personal Data on Atlas's behalf, Atlas will identify it in the Order or on reasonable request.
Provider Changes
Atlas may replace a provider or add a provider with substantially similar functions. Atlas will update this page when a material provider is added or replaced. Where applicable law or an Order requires advance notice or an opportunity to object, Atlas will provide it before the new provider begins the affected processing. A client may raise a reasonable, documented data-protection objection by contacting Atlas promptly.
Provider Practices
Provider retention, processing locations, access, deletion, and account-sharing practices depend on the provider, product tier, contract, and Atlas account configuration. This page does not promise a fixed provider-retention or deletion period.
Atlas will not use private customer information to train general-purpose AI models and will not authorize processors to use it for that training. Private customer information means nonpublic personal information and confidential Client Materials. Authorized AI inference, retrieval from a knowledge base (including retrieval-augmented generation), and other AI processing to deliver the Services remain permitted under the applicable agreement. Variable provider settings do not qualify this commitment. It does not guarantee the practices of independent third parties that obtain publicly available or published information.
A provider's settings or terms do not override Atlas's duties under applicable law or an applicable DPA. Questions about the provider, hosting arrangement, processing location, or safeguards relevant to a particular client engagement may be sent to Atlas using the contact below.
Contact
Questions about this list may be sent to team@atlasvisibility.com.