This page lists the sub-processors Gen3 Marketing LLC ("Gen3") engages to process customer data in providing the AI Visibility service. It is the living exhibit referenced as Annex III of our Data Processing Addendum.
Change notice. We will update this page and notify workspace owners by email at least 30 days before adding or replacing a sub-processor. The version and date above identify the current list.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Microsoft Corporation (Azure) | Cloud hosting: application compute (Container Apps), database (Cosmos DB), file storage (Blob Storage), secrets (Key Vault), monitoring (Application Insights), identity/sign-in (Entra External ID), transactional email (Azure Communication Services) | All Service data: account data, workspace content, scan artifacts, logs, email addresses | United States |
| Stripe, Inc. | Payment processing, subscriptions, invoicing | Billing contact details, payment card data (collected directly by Stripe — never touches Gen3 systems), transaction history | United States / global |
| Cloudflare, Inc. | Bot and abuse protection on public forms (Turnstile) | IP address, user-agent, browser signals | Global (edge network) |
Scan prompts (and configured brand/competitor context) are sent to the AI providers selected by the customer for each scan. All are engaged via their business/API offerings under terms providing that API inputs and outputs are not used to train their models.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| OpenAI, LLC | Executes scan queries against GPT-class models, including web-search variants | Scan prompts and generated responses | United States |
| Microsoft Corporation (Azure OpenAI / Azure AI Foundry) | Executes scan queries against GPT-class models, including web-grounded variants | Scan prompts and generated responses | United States |
| Anthropic, PBC | Executes scan queries against Claude models, including web-search variants | Scan prompts and generated responses | United States |
| Google LLC (Gemini API) | Executes scan queries against Gemini models, including search-grounded variants | Scan prompts and generated responses | United States / global |
| Perplexity AI, Inc. | Executes scan queries against search-native Sonar models | Scan prompts and generated responses | United States |
Engaged only when the customer uses the corresponding feature.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Mapbox, Inc. | Geocoding for location-based scanning (address → coordinates lookups) | Location search text entered by the customer | United States |
| OpenStreetMap Foundation (Nominatim) | Fallback geocoding for location-based scanning, when Mapbox is not configured | Location search text entered by the customer | Global |
| HubSpot, Inc. | Customer-relationship management: receives sales and demo inquiries, free Pulse Report requests, and sample report access requests submitted through our public forms | Name, business email, company, and message contents of demo requests; email, website domain, brand/company name, industry, and the report link from free Pulse Report requests; email, website domain, brand/company name, and industry from sample report access requests | United States |
On our public marketing pages only, and only with your consent, Google LLC provides analytics and advertising measurement (Google Analytics 4, Google Ads) as described in Section 9 of our Privacy Policy. Google processes that data for its own purposes as an independent business and is therefore listed here for transparency, not as a sub-processor of workspace data. No analytics or advertising technology runs inside the signed-in application.