Sub-Processors | RampRight

RampRight uses trusted third-party service providers ("Sub-Processors") to support delivery of our services. These providers may process limited customer data on RampRight's behalf in accordance with our Privacy Policy and contractual obligations.

We evaluate Sub-Processors prior to engagement and require appropriate technical and organizational safeguards to protect customer data.

Current Sub-Processors

Provider	Purpose	Data Processed	Applies To
Vercel	Application hosting, infrastructure, and file storage	Application data, API traffic, and customer-uploaded files	All customers
Neon	Managed PostgreSQL database hosting	All customer account and application data	All customers
Sentry	Error monitoring and application performance tracking	Error reports and diagnostic context (PII minimized)	All customers
PostHog	Product analytics and event tracking	Usage events, account identity, and organization identifiers	All customers
Resend	Transactional email delivery	Recipient addresses and notification content	All customers
Stripe	Subscription billing and payment processing	Billing contact and company billing details	All customers
Google (Gemini)	AI generation and analysis	Customer content and employee learning data used to generate plans, assessments, and summaries	All customers
OpenAI	Speech-to-text transcription	Customer-uploaded media for transcription	All customers
OpenRouter	AI generation for an optional public calculator	Non-personal aggregate inputs. No employee data	All customers
CloudConvert	Document format conversion for in-browser preview	Customer-uploaded documents submitted for conversion	All customers
Microsoft (Office Online Viewer)	In-browser preview rendering of Office documents	The contents of the document being previewed	All customers
YouTube (Google)	Embedded video playback and transcript retrieval	Video identifiers and playback requests. No employee data	All customers
Google Workspace	Single sign-on and calendar scheduling	Account identity and, where calendar is connected, meeting details and attendee identifiers	Customers using Google sign-in or calendar
Microsoft (Graph / Outlook)	Calendar scheduling for Microsoft 365 organizations	Meeting details and attendee identifiers	Only if connected by the customer
Slack	Notification delivery to employees and managers	Workspace and user identifiers (including email for account matching) and notification content	Only if connected by the customer
Salesforce	CRM data for performance reporting	Sales performance records and associated user identifiers	Only if connected by the customer
HubSpot	CRM data for performance reporting	Sales performance records and associated user identifiers	Only if connected by the customer

Data Handling Overview

RampRight limits Sub-Processor access to the minimum data necessary to provide their services.

Providers marked "Only if connected by the customer" receive no data unless an administrator in your organization explicitly authorizes the integration, and they can be disconnected at any time. Where such a provider is your own corporate tenant (for example your Slack workspace or Salesforce organization), data residency and retention for that provider are governed by your agreement with them rather than by RampRight.

Customer content is processed by our AI providers to generate and personalize learning material. Detailed information on processing locations, retention, and provider terms is available to customers and prospective customers on request.

RampRight does not store Slack message content or channel history.

All customer data is transmitted over encrypted HTTPS connections and stored within secure, cloud-hosted infrastructure.

Updates

We may update this Sub-Processor list from time to time as our service providers evolve. Updates will be reflected on this page.