Data protection
Subprocessor List
Last updated: August 17, 2026
Ferocity uses a small core provider set to operate the platform and additional providers only when a workspace enables the related feature or connection. A provider receives only the categories reasonably needed for its function and processes data under its own infrastructure, security, and contractual commitments.
Core platform providers
| Provider | Purpose |
|---|---|
| Netlify | Application hosting, content delivery, serverless functions, and deployment infrastructure |
| Supabase | Database, authentication, storage, and related application infrastructure |
| OpenAI | Configured AI generation, extraction, classification, reasoning, and realtime capabilities |
| Stripe | Subscription billing, payment processing, connected-account onboarding, fraud prevention, and payment records |
| Resend | Transactional and configured inbound email delivery |
Optional or customer-activated providers
| Provider | Purpose |
|---|---|
| Retell AI | Configured AI voice conversations, call events, recordings, and transcripts |
| Twilio | Configured phone numbers, calling, SMS, MMS, routing, and delivery events |
| Telnyx | Configured telephony, messaging, and delivery events |
| Customer-authorized calendar, business profile, advertising, analytics, cloud, and media services | |
| Microsoft | Customer-authorized calendar, email, advertising, and business services |
| Meta, TikTok, Reddit, Snapchat, and other advertising platforms | Customer-authorized campaign, audience, creative, and performance operations |
| Customer-selected CRM, field-service, accounting, website, communications, media, and automation providers | Only the data and permissions needed for the integration the customer activates |
Bring-your-own providers
When an authorized workspace user connects a provider account, Ferocity acts on that customer's documented choice. The provider may process customer data under both Ferocity's integration instructions and the customer's direct agreement with that provider. Disconnecting the provider stops new routine exchanges after in-flight callbacks and legally required records are handled.
Updates and objections
This page is the current notice of core subprocessors. Material additions will be reflected here before or when processing begins. Customers may send a reasonable data-protection objection to support@ferocity.live as described in the Data Processing Addendum.