Subprocessors

BRE Pulse  ·  Last Updated: October 11, 2026

BRE Pulse uses the service providers below to operate the brepulse.com platform. This list reflects what our production code actually sends to each provider today. See our Security & Trust page and Privacy Policy for more context.

Core infrastructure and product providers

ProviderPurposeData involved
Cloudflare, Inc.Application hosting (Workers), file storage (R2), and hosted Whisper speech-to-text (Workers AI) for voice notes. Requests are served through Cloudflare's global network. R2 buckets carry an eastern North America location hint, which is a placement preference, not a guarantee of jurisdictionAll application data in transit; uploaded files (documents, recordings, images) at rest; voice-note audio sent for transcription only, never stored by the transcription step itself
NeonApplication database (PostgreSQL), hosted on Amazon Web Services in the us-east-2 region (Ohio, United States)All application records at rest
Anthropic, PBCClaude models: Ally's answers, note/document analysis, report narrative generation, comment analysis, action-plan draftingThe specific business or document content needed to answer the request in front of Ally at that moment
Stripe, Inc.Payment processing (purchases and subscriptions)Payment details; BRE Pulse does not receive or store full card numbers or CVV
ResendTransactional email (invitations, reminders, receipts, staff notifications)Recipient email addresses and message content
Twilio Inc.Text messages between BRE Pulse staff and prospective or current customers who agreed to receive textsPhone numbers and message content
OpenStreetMap Foundation (Nominatim)Address-to-coordinate lookup for the business mapBusiness street addresses submitted for geocoding
Geocod.io (Loki Labs LLC)Paid address-to-coordinate lookup for the business map when an organization's map needs itBusiness street addresses submitted for geocoding
Microsoft Graph (Microsoft Corporation)Optional customer-connected Microsoft 365 calendar (create/view/link events)Calendar events only — the connection never requests mail access
8x8, Inc. (JaaS / Jitsi as a Service)Video meetings, including virtual business visits; cloud recording and transcription when the organizer turns recording onMeeting audio/video and participant names for meetings that are scheduled on the platform

Voice narration (text-to-speech)

Ally's spoken voice uses one of the following, in this priority order depending on which is configured; only the narration text is sent, never business records.

ProviderPurposeData involved
Cartesia, Inc.Text-to-speech voice synthesis (primary)Narration/response text converted to audio; audio is cached by text hash so identical lines are not resent
ElevenLabs, Inc.Text-to-speech voice synthesis (fallback)Narration/response text converted to audio
OpenAI, L.L.C.Text-to-speech voice synthesis (fallback)Narration/response text converted to audio

Public statistics (no customer data sent)

ProviderPurposeData involved
U.S. Census Bureau (api.census.gov)Community/economic aggregate statistics (Census, ACS, Business Patterns)None of ours — we only send a geography/table query and receive public aggregate data back
U.S. Bureau of Labor Statistics (api.bls.gov)Labor market aggregate statistics (QCEW and related series)None of ours — we only send a series/geography query and receive public aggregate data back

Marketing site analytics

ProviderPurposeData involved
Google Analytics / Google AdsWebsite traffic and advertising-performance measurement on our public marketing pages onlyBrowsing and conversion data via the gtag tag; not used inside the signed-in product

This list will change as we add or remove providers. Where a Data Processing Addendum with a customer commits to advance notice of subprocessor changes, we follow that commitment for that customer.