Subprocessors
Version in effect on .
In short
- A subprocessor processes information for us, only to provide Pilotiko, and under a contract.
- Services you connect yourself (your Google, Microsoft, Zoom account…) act under your own terms with them.
- We announce any new subprocessor on this page before using it.
1. Platform subprocessors
These providers are used by Pilotiko itself when the corresponding feature is active.
| Name | Role | Data processed | Country or region | Safeguards |
|---|---|---|---|---|
| <mark class="a-completer">[À COMPLÉTER: qui héberge les serveurs de production (ex. vos propres machines, ou le nom de l'hébergeur)]</mark> Used by the platform | Hosting of servers, database, files and backups. | All service data. | <mark class="a-completer">[À COMPLÉTER: ville ou région et pays des serveurs de production et des sauvegardes (ex. Montréal, Québec, Canada)]</mark> | Database isolation between businesses, encrypted secrets, encrypted off-machine backup copies. |
| Amazon Web Services, Inc. (Amazon SES, Amazon SNS) Used by the platform | Sending platform and customer emails; bounce and complaint notifications. | Recipient address, sender, subject and email content. | ca-central-1 (Canada, Montréal) | AWS service terms and data processing addendum; encryption in transit. |
| Anthropic PBC Used by the platform | Language model (Claude) for the assistant, AI agents, AI secretary and public lookup during onboarding. | Text needed for the requested task (see "Data sent to AI"). | United States | Provider's commercial terms. Training: <mark class="a-completer">[À COMPLÉTER: confirmer par écrit qu'Anthropic n'entraîne pas ses modèles sur vos données d'API (conditions commerciales)]</mark>. Option: local model, nothing sent outside. |
| <mark class="a-completer">[À COMPLÉTER: fournisseur de la boîte de réception info@ (PILOTIKO_IMAP_HOST), ex. Zoho Mail]</mark> Used by the platform | Inbox of our info@ address (read by Pilotiko every 2 minutes). | Emails you send us. | Per the provider. | Mail provider's terms. |
| Stripe, Inc. / Stripe Payments Canada, Ltd. Used by the platform | Payment of the Pilotiko subscription (checkout page hosted by Stripe). Enabled: <mark class="a-completer">[À COMPLÉTER: oui ou non — Stripe est-il activé en production (OQEL_STRIPE_SECRET_KEY) ?]</mark>. | Account email, plan, business identifier; card data is entered at Stripe only. | Canada and United States | PCI DSS compliant (Stripe); Pilotiko never sees a card number. |
| Twilio Inc. Used by the platform | Phone assistant: numbers, calls, speech recognition and synthesis, text messages, voicemail. Offered: <mark class="a-completer">[À COMPLÉTER: oui ou non — l'assistant téléphonique Twilio est-il offert en production ?]</mark>. | Caller's number, voice and text of the call, text messages, voicemails. | United States | Twilio data processing addendum; webhooks verified by signature. |
| Google LLC (API Google Places) Used by the platform | During onboarding, find the customer business's public listing (address, phone, hours). | Business name and city (no information about an individual). | United States | Google Maps Platform terms. |
2. Services you connect
These services receive data only if your business links its own account. Pilotiko then acts in your account, for the features you use; your terms with that provider apply. Access tokens are encrypted at Pilotiko and erased on disconnection.
| Name | Role | Data processed | Country or region | Safeguards |
|---|---|---|---|---|
| Google LLC (Google Agenda, Gmail) If you connect it | Only if you connect your Google account: calendar and sending email from your address. | See the "Google user data" section of the Privacy Policy. | Per your Google account. | Google API Services User Data Policy, Limited Use requirements. |
| Microsoft Corporation (Outlook, Microsoft 365, Teams) If you connect it | Only if you connect your account: calendar, sending email, Teams meetings and their transcripts. | Calendar events, sent emails, meeting transcripts. | Per your Microsoft account. | Your terms with Microsoft. |
| Zoom Communications, Inc. If you connect it | Only if you connect your account: create meetings and read their transcripts. | Meetings, participants, transcripts. | Per your Zoom account. | Your terms with Zoom. |
| Zoho, LinkedIn, Meta, Square, Clover, Stripe Connect, Acuity, Cloudflare, GoDaddy If you connect it | Only if you connect these accounts; Pilotiko acts in your account, under your own terms with that provider. | Depending on the tool: posts, payments, DNS records, imported appointments. | Per the provider. | Tokens and keys encrypted at Pilotiko. |
3. Changes
We update this list before adding a subprocessor that processes personal information. Customer businesses bound by our data processing agreement may object to a new subprocessor on reasonable grounds within 30 days of the notice. Transfers outside Quebec are described in the Privacy Policy.
Change history
| Date | Change |
|---|---|
| First published list. |
Printable version: use your browser's Print function.