Legal
Sub-processors
Last updated: October 2, 2026
The companies that help us run higheredcrm.ai and this website, what each one does and what data it handles. This list is published; entries marked pending are being confirmed. Hosting and messaging providers, and where each provider processes data, are confirmed in writing before you sign.
1. The CRM service
Institutions use higheredcrm.ai to manage inquiries, applicants and their communications. For that data we act as the institution's processor, and these providers help us run the service as our sub-processors, under written contracts with confidentiality and security obligations.
| Purpose | Data it handles | Provider |
|---|---|---|
| AI Assistant | Questions staff ask the assistant and the account records needed to answer them. | Anthropic, PBCAnswers come from Anthropic's Claude. Our terms bar using customer data to train AI models without written permission. |
| Cloud hosting, database and file storage | All customer data in the service, including documents and call recordings. | Pending: confirmed in writing before you sign |
| Email delivery for built-in channels | Recipient addresses and the content of emails sent through built-in channels. | Pending: confirmed in writing before you sign |
| SMS and WhatsApp messaging for built-in channels | Recipient numbers and the content of messages sent and received through built-in channels. | Pending: confirmed in writing before you sign |
| Cloud telephony | Phone numbers, call details, recordings and transcripts for calls placed through the service. | Pending: confirmed in writing before you sign |
| Notification delivery | In-app, email and device push notifications sent to staff users. | Pending: confirmed in writing before you sign |
2. This website
For visitors and for demo and pilot requests, we decide how data is used (we are the controller). These providers help us run the website. See the privacy policy for what we collect and why.
| Purpose | Data it handles | Provider |
|---|---|---|
| Website hosting and delivery | Website requests, standard server logs, and demo and pilot requests in transit. | Vercel Inc. |
| Form delivery to our team | Demo and pilot requests: the details you enter and the campaign information sent with them. | Pending: confirmed in writing before you sign |
| Analytics and advertising measurement | How the website is used and whether a visit came from one of our ads. | Google LLC (Google Tag Manager and the Google tags it runs)Only if you accept analytics or advertising cookies. Before you choose, nothing loads. |
3. Providers you connect yourself
If your institution connects its own messaging, email or calling accounts, those providers work for you, not for us. They bill you directly, and their own terms and privacy policies apply. They are not our sub-processors.
4. Changes and questions
We update this page when we add or replace a provider, and the date at the top changes. Customers can ask for provider details that are still being finalized, the locations where data is processed and the transfer safeguards we use by writing to privacy@higheredcrm.ai.
Reviewing us for procurement?
The trust center has our security controls, the procurement pack and the answers your security questionnaire will ask for.