Effective July 28, 2026 · Version 1.0
Operational draft: This is a conservative list based only on providers confirmed in the public website repository. It is not yet a complete production vendor inventory. Operations and counsel must validate the application host, database, authentication, payment, email, support, security, enrichment, and AI-model vendors; legal entities; processing locations; retention and training terms; and transfer mechanisms before commercial reliance.
A subprocessor processes Customer Personal Data on Scryon's behalf to provide the Service. A customer-directed integration receives data because a customer connects its own account or directs an export. An independent data source supplies or publishes business information under its own legal role and is not necessarily Scryon's processor. These categories should not be treated as interchangeable.
The Data Processing Addendum governs authorized subprocessors. Data categories listed below describe possible processing, not a statement that every provider receives every field.
| Provider | Purpose and data | Location and transfer basis |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Public website build, deployment, delivery, and related logs. May process IP address, request metadata, diagnostics, and published website content. Use for application hosting or Customer Data is not verified. | Exact region and support locations require validation. Applicable AWS contractual transfer safeguards, including SCCs where required, must be confirmed. |
| Google LLC (Google Analytics) | Optional public-site analytics after consent. May process online identifiers, IP-derived information, device/browser details, referral data, and website interactions. | Processing locations, retention, account settings, and applicable transfer mechanism require validation. Google's contractual safeguards may include SCCs where required. |
No other production processor can be responsibly named from the repository reviewed for this version. This does not mean no other processor is used.
Scryon uses AI and machine-learning models to classify, match, score, summarize, enrich, research, and otherwise process customer-provided and aggregated data. The repository confirms AI functionality but does not identify the production model provider or providers.
Before Customer Personal Data is submitted to a model provider, the provider must be added to the validated subprocessor inventory with its legal name, purpose, data categories, processing locations, transfer mechanism, retention setting, and whether submitted data may be used to train provider models. Until verified in writing, Scryon does not represent that model inputs or outputs receive zero retention or are excluded from all provider training.
| Service | Confirmed function | Role |
|---|---|---|
| Salesforce | Customer-authorized synchronization of accounts, contacts, opportunities, and enriched event intelligence. | Typically the customer's provider and recipient under the customer's agreement. Scryon's precise role and any platform-side subprocessing must be validated. |
| HubSpot | Customer-authorized synchronization of deals, contacts, event-related leads, and match scores. | Typically the customer's provider and recipient under the customer's agreement. Scryon's precise role and any platform-side subprocessing must be validated. |
| Slack | Customer-authorized delivery of event alerts and match notifications. | Typically the customer's provider and recipient under the customer's agreement. Scryon's precise role and any platform-side subprocessing must be validated. |
| CSV import and export | Customer-directed transfer of target accounts, contacts, pipeline, attendee, and enriched information. | Not a third-party provider. Customer controls the source and destination files and must secure them. |
Google Calendar and a REST API are described on the public integration page as coming soon and are not represented here as active production integrations.
Scryon may aggregate business and event information from the following source categories:
The repository does not confirm the names of production enrichment or business-data providers. They must not be described as subprocessors solely because Scryon receives data from them. Each source's controller, joint-controller, processor, or independent-business role requires legal assessment.
Scryon does not create or independently verify every source record. Information may be inaccurate, incomplete, duplicated, stale, unavailable, or lawfully restricted. See the Business Data Notice for indirect-collection disclosures and correction, objection, deletion, and suppression procedures.
Scryon will update this page when the validated provider inventory changes and will provide notice of a new subprocessor as required by an applicable DPA. Customers that need direct notices should request an executed DPA and notice mechanism at privacy@scryon.io.
A customer may object to a new subprocessor on reasonable data-protection grounds using the process and deadline in the DPA. Individuals may submit privacy requests through Privacy Choices.
Related documents: Privacy Notice, Cookie Policy, and Terms of Service.