Sub-processors
Effective date: September 9, 2026 · Version v2026-09-09 · Last updated: October 9, 2026
These are the third parties that process personal information on behalf of Cache CRM in order to deliver the Service. Each receives only the data its function needs, under a contract that restricts its use. This list is incorporated by reference into our Data Processing Addendum and mirrors the tables in Section 5 of the Privacy Policy.
Core sub-processors
Used for every Workspace.
| Name | Purpose | Data | Location |
|---|---|---|---|
| Google Firebase / Google Cloud | Authentication, database, file storage, serverless functions, and push notification delivery to web browsers | Account data and all Workspace CRM content | United States |
| Twilio | SMS delivery, inbound SMS, voice calls and call logs | Phone numbers, message content, call metadata, recordings and transcripts where enabled, opt-out status | United States |
| Resend | Transactional and Workspace-sent email delivery | Email addresses, subject and body, delivery and unsubscribe status | United States |
| Amazon Web Services (Amazon SES, via Resend) | Underlying email transport used by Resend | Email addresses, subject and body, delivery status | United States |
| Stripe | Card payment processing, Stripe Connect payouts and stored payment methods | Card data (held by Stripe), amounts, customer and payment method identifiers | United States |
| Expo (Expo Application Services) | Mobile push notification delivery | Device push tokens and notification payloads, which can include a contact name and a message preview | United States |
| Typesense Cloud | Search index behind in-app search | Indexed text from contacts, jobs, invoices, estimates and leads | United States |
| Google Maps Platform | Address autocomplete and validation | Address text entered into address fields | United States |
| Sentry | Crash and error reports and performance traces from the iPhone app, the web app and our servers | Error details, app version, device type and a pseudonymous account identifier; no message content, email addresses or phone numbers | United States |
| Apple (Apple Push Notification service) | Delivering push notifications and incoming-call alerts to iPhones | Device push tokens and notification payloads, which can include a contact or caller name, number and a message preview | United States |
| Vercel | Hosting and delivery of the cachecrm.com website | Request logs, IP address, user agent | United States |
| Google Fonts | Web font delivery on the cachecrm.com website | IP address and user agent of site visitors | United States and global content delivery network |
Optional sub-processors
Engaged only for a Workspace that switches the relevant integration on. None of these receive anything from a Workspace that has not enabled them.
| Name | Purpose | Data | Location |
|---|---|---|---|
| Anthropic | AI automation actions, using the Workspace's own API key | Message text and the contact, job, invoice and estimate fields the Workspace puts in its prompt template | United States |
| Google (Gemini) | AI automation actions, using the Workspace's own API key | Message text and the contact, job, invoice and estimate fields the Workspace puts in its prompt template | United States |
| OpenAI | AI automation actions, using the Workspace's own API key | Message text and the contact, job, invoice and estimate fields the Workspace puts in its prompt template | United States |
| xAI | AI automation actions, using the Workspace's own API key | Message text and the contact, job, invoice and estimate fields the Workspace puts in its prompt template | United States |
| Slack | Automation notifications to a Slack channel | Whatever the Workspace puts in the notification | United States |
| Discord | Automation notifications to a Discord channel | Whatever the Workspace puts in the notification | United States |
| Google Workspace (Calendar and Sheets) | Writing jobs to a calendar and rows to a spreadsheet | Job, contact and schedule fields the Workspace maps | United States |
| QuickBooks (Intuit) | Accounting sync | Customer, invoice and payment records | United States |
| ConnectTeam | Crew scheduling and dispatch | Job and assignment fields | United States and Israel |
| ElevenLabs | AI voice assistant for phone calls, when a Workspace enables one | Call audio and the conversation content handled by the voice assistant | United States |
| JotForm | Receiving lead-intake form submissions into the Workspace | The fields the Workspace’s form collects | United States |
| Workiz | Importing the Workspace’s own records from its Workiz account | Clients, leads, jobs and invoices the Workspace chooses to import | United States |
| Zapier and other webhook destinations | Sending event data to any https endpoint the Workspace configures | The event payload the Workspace selects | Determined by the Workspace, which chooses the destination |
How we notify you of changes
We will give at least 30 days' notice before a new sub-processor starts processing Customer Personal Data, and we will update the “Last updated” date on this page at the same time.
To receive those notices, email support@cachecrm.com with the subject line “Sub-processor notices” and we will add your address to the list. Workspace administrators also receive the notice by email and in the application.
You may object to a new sub-processor in writing within the 30-day notice period on reasonable data-protection grounds. Section 5 of the Data Processing Addendum sets out what happens next.
Change log
- September 14, 2026 — clarified that the Google Firebase / Google Cloud row includes push notification delivery to web browsers, and that Expo's purpose covers mobile push notification delivery. No new sub-processor was added; both were already in scope under “serverless functions” and “push notification delivery to mobile devices” respectively.
- September 9, 2026 — list published. Added Expo, Typesense Cloud, Amazon SES (via Resend), Google Fonts and the four AI providers (Anthropic, Google Gemini, OpenAI, xAI), which were not named in the previous Privacy Policy. Split the list into core and optional, and added processing locations.
Contact
Cache CRM (a product of SoCal Cleaner, LLC) support@cachecrm.com 562-280-2925 20208 State Rd, Cerritos, CA 90703Related: Terms of Service · Privacy Policy · SMS Terms · Data Processing Addendum