Sub-processors
The list of third parties that touch customer data — hosting, database, email delivery and the advertising platforms you connect.
Not published yet
Closed Loop is in early access and this document is still being drafted. It will be in place before the first paying account connects a live ad account. If you need the current terms in the meantime, ask us directly and we will send them. The Closed Loop Enrich section below is in force.
Closed Loop Enrich
The third parties that touch Closed Loop Enrich data, what each one receives and where. Last updated 2026-10-24.
| Sub-processor | What it does | Data it receives | Where |
|---|---|---|---|
| Apify Technologies s.r.o. | Runs the public-profile lookup tools. With a workspace’s own Apify key, the lookup runs in that workspace’s Apify account instead. | The email addresses (and their domains) of the contacts a run looks up; the public profile data returned. | Czech Republic (company); runs in the United States |
| Anthropic, PBC | The AI model that grades contacts against the customer’s rubric. | Derived professional fields, the company domain and the company website’s description. Never the email address or the name. | United States |
| OpenRouter, Inc. | Routes a grading request to the model the workspace chose, when it grades through OpenRouter. | The same fields as the grading model. Never the email address or the name. | United States |
| Railway Corporation | Hosts the app and the background workers that run imports, lookups, grading and write-backs. | Everything a run processes, while it runs. | United States (Virginia) |
| Supabase, Inc. | Database, sign-in and file storage. | Everything Enrich stores: lists, contacts, derived fields, grades, the lookup history. | United States (AWS us-east-1, Virginia) |
| Cloudflare, Inc. | DNS, the network edge in front of enrich.getclosedloop.io, and forwarding privacy@getclosedloop.io. | Requests in transit, and the privacy emails people send us. | Global network |
The email platforms a customer connects (beehiiv, Kit, Mailchimp, Klaviyo, ActiveCampaign, HubSpot) are the customer's own processors, under its own contracts with them. Transfers from the EU, the EEA and the UK use the Standard Contractual Clauses and the UK Addendum; see the data processing terms.