Subprocessors
Last updated: 2026-09-25
neesh Inc. uses the following third-party services ("sub-processors") to deliver AskBase. Each sub-processor has been assessed for data handling practices. We will provide 30 days notice via email before adding a new sub-processor that processes personal data.
Two lists follow, because they cover different people. The first is AskBase, the product a customer's data passes through. The second is this website, which almost everyone reading this page is using right now and which has its own, much shorter, set. Nothing on either list is aspirational: every entry is a service the code calls, the site runs on, or your message reaches. Where a service only receives data once a feature is switched on for your organisation, the entry says so.
AskBase (the product)
- AWS (Amazon Web Services)
- Purpose: Cloud hosting, database, file storage, message queuing, authentication
infrastructure.
Data categories: All customer data at rest and in transit.
Location: us-east-1 (United States). - Cognito (subset of AWS)
- Purpose: User authentication and identity management.
Data categories: Email addresses, hashed credentials, session tokens.
Location: us-east-1 (United States). - Anthropic
- Purpose: AI inference for document summarisation, query answering, and onboarding
assistance (Claude models).
Data categories: Query text, document excerpts passed as context.
Location: United States. - OpenAI
- Purpose: Text embedding generation for semantic search.
Data categories: Document text and query text used to generate vector embeddings.
Location: United States. - Stripe
- Purpose: Payment processing and subscription management.
Data categories: Billing contact name, email, payment method metadata (card last 4, expiry). Full card numbers are never stored by neesh Inc.
Location: United States. - Twilio
- Purpose: Voice interface telephony (when voice features are enabled for your organisation).
Data categories: Phone numbers, voice audio transcripts.
Location: United States. - Deepgram
- Purpose: Speech-to-text transcription for the voice interface (when voice features
are enabled for your organisation).
Data categories: Voice audio recordings.
Location: United States. - ElevenLabs
- Purpose: Text-to-speech synthesis for voice interface responses (when voice features
are enabled for your organisation).
Data categories: Answer text converted to audio.
Location: United States. - Sentry
- Purpose: Error monitoring and performance tracking.
Data categories: Anonymised stack traces and error metadata. PII is scrubbed before transmission.
Location: United States. - neesh Inc.
- Purpose: Product development, support, and operations.
Data categories: All categories as data controller and processor.
Location: Hamilton, Ontario, Canada.
This website (neeshinc.ca)
Visiting neeshinc.ca does not involve any service on the list above. Three third parties are involved, each for a different reason: Cloudflare on every request, because it hosts the site; TidyCal on the contact page only; and Microsoft only if you email us.
- Cloudflare
- Purpose: Hosting and content delivery. Every page and file of this website is
served to you by Cloudflare, Inc.
Data categories: What any web host receives with each request: your IP address, the address of the page you ask for, the page you came from, your browser's user agent, and connection details such as the TLS version. We have not switched on Cloudflare's analytics or bot-management features, so it sets no analytics cookie; it may set a short-lived security cookie if it has to challenge a visitor it considers suspicious (Cloudflare cookies).
Retention: Cloudflare's privacy policy sets no fixed period for this data. It keeps it for as long as its stated business purposes and legal obligations require (Cloudflare Privacy Policy, "Data retention").
Location: Cloudflare's global network. Cloudflare stores this information primarily in the United States and the European Economic Area and may access it from other countries (same policy, "International information transfers"). - TidyCal
- Purpose: The booking calendar embedded on our contact page, used to schedule the
free assessment call. The calendar is loaded from TidyCal on that page only.
Data categories: Your name, your email address, the time you select, and anything you type into the booking form. If you never open the contact page, TidyCal receives nothing.
Location: United States. - Microsoft 365
- Purpose: Email. Messages you send to hi@neeshinc.ca, including through the mail
links on this site, are delivered to a Microsoft 365 mailbox. Nothing is sent until you send it
from your own mail program.
Data categories: Your email address, your name if your mail program includes it, the message and anything you attach.
Location: Microsoft's data centres for the Microsoft 365 organisation that holds the mailbox, which Microsoft's public information places in its Asia region. That organisation is administered for us today by the agency that built our previous website, so its administrators have technical access to the mailbox; this entry will change when that does.
We run no analytics. Google Analytics was removed from this site on 22 September 2026 and nothing replaced it, so no analytics script loads and no analytics cookie is set. The request details Cloudflare receives, above, are what hosting a website involves, not analytics we run. We intend to adopt a cookieless, privacy-respecting analytics tool; when we do, it will appear on this list and this paragraph will say so before it is switched on.
Requesting attestations
Customers can request our security questionnaire response and AWS Artifact-derived sub-processor attestations by contacting hi@neeshinc.ca.
Contact
neesh Inc. · 112 King Street East, Hamilton, Ontario, L8N 1A8, Canada
hi@neeshinc.ca