Subprocessors
Last updated: April 2026
CargoLint uses the following third-party subprocessors to help provide, secure, and improve our services. Each subprocessor has been vetted for compliance with our data protection standards.
Infrastructure and Hosting
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure | Cloud hosting, database, file storage, caching, message queuing, secrets management, and application monitoring | United States / EU (customer-selected region) |
| GitHub | Source code hosting and continuous integration/deployment | United States |
Payment Processing
| Subprocessor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing, subscription billing, and invoicing | United States |
Communications
| Subprocessor | Purpose | Location |
|---|---|---|
| SendGrid (Twilio) | Transactional email delivery | United States |
Authentication
| Subprocessor | Purpose | Location |
|---|---|---|
| OAuth single sign-on | United States | |
| Microsoft | OAuth single sign-on | United States |
AI and Document Processing
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure OpenAI | Document field extraction and HS code classification | United States / EU (customer-selected region) |
Analytics
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Analytics | Website analytics (marketing site only - no application data) | United States |
Updates to This List
We will update this page whenever we add or remove a subprocessor. If you have subscribed to subprocessor notifications, we will notify you by email at least 30 days before engaging a new subprocessor.
For questions about our subprocessors or data processing practices, contact us at privacy@cargolint.com.