Subencargados del tratamiento
Última actualización: 22 de mayo de 2026
Kindora, PBC contrata a los subencargados del tratamiento indicados abajo para procesar Datos Personales en nombre de sus clientes durante la prestación de los Servicios. Cada proveedor está sujeto a un acuerdo de procesamiento de datos con protecciones no menos estrictas que el DPA de Kindora.
Avisamos a los clientes con al menos 30 días de anticipación antes de añadir o sustituir un subencargado. También puedes solicitar aviso por correo escribiendo a privacy@kindora.co.
Los Datos del Cliente no se usan para entrenar los modelos base de proveedores de IA cuando usamos sus API empresariales.
Infrastructure & hosting
| Subencargado | Finalidad | Datos Personales procesados | Región | DPA |
|---|---|---|---|---|
| Supabase Inc. | Primary database, authentication, file storage | All Customer Data | United States | supabase.com/legal/dpa |
| Microsoft Azure | Backend application compute/hosting | Customer Data in processing | United States (East US 2) | Microsoft Products & Services DPA |
| Vercel Inc. | Frontend application hosting / edge | Application traffic, limited account PII | United States | vercel.com/legal/dpa |
AI model providers
| Subencargado | Finalidad | Datos Personales procesados | Región | DPA |
|---|---|---|---|---|
| Anthropic, PBC (Claude) | AI generation: Intel Briefs, drafting, matching, chat | Prompts that may include org/funder/contact data | United States | Commercial Terms + DPA |
| OpenAI, L.L.C. | AI generation and text embeddings | Prompts and embeddings of submitted context | United States | openai.com/policies/data-processing-addendum |
| Perplexity AI, Inc. | AI-assisted web research | Research queries that may include names | United States | perplexity.ai DPA |
| Cohere Inc. | Text embeddings / reranking | Embeddings of org/funder content | United States / Canada | cohere.com DPA |
Research & enrichment
| Subencargado | Finalidad | Datos Personales procesados | Región | DPA |
|---|---|---|---|---|
| Tavily | Web search for prospect/donor intelligence | Search queries that may include names | United States | per Tavily terms |
| Apify | Web scraping for board/network and LinkedIn data | Publicly available individual profile data | United States / EU | apify.com/data-processing-agreement |
| Firecrawl | Web crawling of funder pages | Web page content | United States | per Firecrawl terms |
| OutScraper | Google/news search for funder research | Search queries and public web results | United States / EU | per OutScraper terms |
| Enrich Layer | Contact/profile enrichment and email lookup | LinkedIn/profile URLs, names, employment and education signals | United States | per Enrich Layer terms |
| Tomba | Email discovery and verification | Names, domains, LinkedIn URLs, email addresses | EU / United States | tomba.io privacy/DPA terms |
| Decodo | Residential proxy for public real-estate enrichment requests | Request metadata and public-source lookup traffic | EU / United States | decodo.com legal terms |
Payments, email, analytics & monitoring
| Subencargado | Finalidad | Datos Personales procesados | Región | DPA |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing and subscriptions | Billing contact and payment data | United States | stripe.com/legal/dpa |
| Resend | Transactional email delivery | Recipient name and email | United States | resend.com DPA |
| MailerLite (UAB MailerLite) | Marketing email / newsletters | Subscriber name and email | EU (Lithuania) / United States | mailerlite.com/legal/dpa |
| PostHog Inc. | Product analytics | Usage events and user identifiers | United States (US Cloud) | posthog.com/dpa |
| Functional Software, Inc. (Sentry) | Error monitoring | Error context that may include limited PII | United States | sentry.io/legal/dpa |
No son subencargados
- Blackbaud Raiser's Edge NXT, Salesforce y otros CRM que conectes son tus propios sistemas, no subencargados de Kindora.
- Candid y los conjuntos de datos públicos del IRS/Form 990 son fuentes de registros organizacionales públicos, no encargados de Datos Personales del Cliente.
- LinkedIn Marketing API se usa para el marketing propio de Kindora y no procesa Datos Personales del Cliente en tu nombre.