Subprocessors
Catalyst uses a small set of providers. This page lists them by category: what each does, which data it sees, where it is, and how transfers outside the European Economic Area are covered.
Provider categories
| Category | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Cloud database and storage (with the platform) | Runs the platform: workspace data, sign-in and files | All workspace data: leads, correspondence, notes, user accounts | Database, sign-in and files in a European Union region, stored and primarily processed there | Standard Contractual Clauses |
| Background processing and working records | Runs scheduled jobs, keeps working records and checks that jobs actually run | Lead records, correspondence passing through jobs, touch and draft records | United States and European Union | EU–US Data Privacy Framework or Standard Contractual Clauses |
| AI models | Drafts emails and sorts replies | The lead’s messages and the context for the draft | European Economic Area and United States | Standard Contractual Clauses; data sent through the API is not used to train the models |
| Contact data and address verification | Finds the business email of the right person; checks an address before every email | Name, job title, company, business email | United States | Standard Contractual Clauses or an adequacy decision; being confirmed for part of this category |
| Messaging integration | Connects the rep’s own LinkedIn account, with the rep’s permission | LinkedIn profile and conversation data | European Union | Within the EU; onward transfers under Standard Contractual Clauses, adequacy decisions or the EU–US Data Privacy Framework |
| Hosting and network | Serves this site and the cabinet; DNS and bot protection | IP addresses and request metadata | United States provider, global network | EU–US Data Privacy Framework and Standard Contractual Clauses |
| Service email (with the platform) | Invitations and account notices | User email address | United States | Standard Contractual Clauses and the EU–US Data Privacy Framework |
| Team notifications | Delivers approval cards to the rep | Draft email, lead name and company | EU data storage | Under review |
| Business email (with the platform) | Our team’s correspondence with clients | Correspondence with clients | Global data centres | Standard Contractual Clauses |
AI models and contact-data providers run on your own accounts and keys; they are listed here because Catalyst sends data to them on your behalf.
Services on your own accounts
Catalyst works inside some of your own tools — your mailbox, your CRM and your meeting-notes tool — with your permission and under your own contracts with those providers. How each is treated under data protection law is set out in the data processing agreement.
The named list
We share the full list — each provider’s name, entity, location and role — with clients as an annex to the data processing agreement, and with prospective clients under a confidentiality agreement.
Changes
A new provider is added only under a data processing agreement with it and after advance notice to clients, who can object. The notice period and how to object are set out in our data processing agreement.
If Catalyst has written to you
You can ask which providers received your data — the privacy page explains how.