Subprocessor List
What outside companies help Dealr run its services.
How this page works. Capitalized terms used but not defined in this page have the meanings given in Section 2 of the MSA General Terms, including the terms Section 2 identifies as defined in other components of the Agreement. This page is the Subprocessor List referenced in DPA §6.1 (authorization; list). If this page conflicts with the DPA, the DPA controls.
Dealr uses the third-party subprocessors below to provide the Services. Dealr binds each one by written terms that require it to keep Personal Data confidential and protect it with appropriate security measures, and Dealr remains responsible for its subprocessors (DPA §6.1). Dealr hosts its own production systems in the United States; subprocessors may process data in the United States and other countries (DPA §11.1). AI vendors are also subject to the standing rules in AI Addendum §3.5.
Changes. Dealr emails each Customer’s Authorized Contacts and account administrative email at least thirty (30) days before a new subprocessor processes Personal Data, and records each change in this page’s version history at the Policy Center (DPA §6.2 (subprocessor changes)).
This list does not include:
(a) entities to which Customer directs disclosure through the Services, or whose services Customer itself contracts for and authorizes Dealr to connect to. Examples are a lender Customer selects to receive a credit application, an integrator Customer designates, Customer’s own payroll or DMS provider that Customer connects to the Services, or a Customer email environment (such as Google Workspace) that Customer’s administrator authorizes the Services to access, or an AI application a Customer End User connects through an AI Client Connection (MSA §10.2(d)). All such entities process data as independent recipients or as Customer’s own service providers under Customer’s instructions and Customer’s own agreements with them; or
(b) government authorities (e.g., state DMVs, county clerks, tax authorities) that receive filings and submissions required for the Services or by law.
Where Dealr engages an intermediary of its own choosing to transmit data to such recipients, that intermediary is listed below. Independent financial service providers and consumer reporting agencies that end users or Customer contract with directly are named under “Not subprocessors” below.
Subprocessors
| Subprocessor | Category | Purpose |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud | Hosting, storage, compute; AWS AI services (document OCR, PII redaction) |
| Anthropic, PBC | AI & documents | LLM inference for AI Features |
| OpenAI OpCo, LLC | AI & documents | LLM inference; speech-to-text |
| Deepgram, Inc. | AI & documents | Speech-to-text |
| Voyage AI Innovations, Inc. (a MongoDB, Inc. company) | AI & documents | Text embeddings |
| Pinecone Systems, Inc. | AI & documents | Vector database |
| Azure Document Intelligence (Microsoft Corporation) | AI & documents | Document OCR/extraction; Dealr-scoped custom document models |
| Ntropy Network Inc. | AI & documents | Financial-transaction enrichment |
| Fireworks.ai, Inc. | AI & documents | LLM inference for AI Features (hosted models, including the DeepSeek, Kimi/Moonshot, and GLM families) |
| SignRequest B.V. (a Box, Inc. subsidiary) (legacy) | E-signature | Storage of documents from past e-sign ceremonies |
| Anvil (legacy) | E-signature | Storage of documents from past e-sign ceremonies |
| Zoho Corporation (Zoho Sign) | E-signature | Electronic-signature execution |
| PrintNode Ltd. | Back office | Cloud printing to Customer printers |
| Twilio Inc. | Communications | Voice, phone numbers, inbound SMS |
| Telgorithm Inc. | Communications | A2P SMS/MMS transport; 10DLC registration |
| Mailgun Technologies, Inc. (a Sinch company — “Sinch Email”) | Communications | Email delivery |
| Intercom, Inc. | Communications | In-app chat and support ticketing |
| FullStory, Inc. | Analytics & ops | Session replay and product analytics |
| Smarty, LLC (formerly SmartyStreets) | Analytics & ops | Address validation and autocomplete |
| Dotsquare LLC d/b/a Geocodio | Analytics & ops | Address geocoding (dealr.tax) |
| Google LLC (Google Maps Platform) | Analytics & ops | Address autocomplete and geocoding |
| New Relic, Inc. | Analytics & ops | Performance monitoring |
| Functional Software, Inc. d/b/a Sentry | Analytics & ops | Application error tracking |
| Catamorphic Co. d/b/a LaunchDarkly | Analytics & ops | Feature-flag evaluation |
| Google LLC (reCAPTCHA) | Analytics & ops | Bot protection on dealer-website forms |
Not subprocessors
These providers process data under their own terms and legal obligations, and are not Dealr subprocessors:
- Payment, bank-connectivity, and credit providers that end users or Customer contract with directly: Dwolla, Inc.; Plaid Inc.; Quiltt, Inc. (with its sub-aggregators MX Technologies, Inc. and Finicity, Inc.); Cardknox Development, Inc. d/b/a Sola; 700Credit, LLC; and Checkr, Inc. (background screening under Schedule B §B-4(b)).
- Entities in the exclusions above, such as recipients Customer directs, Customer’s own connected services, and government authorities.
Version history
- October 1, 2026Currentv1.0.0
Published Dealr Subprocessor List.