Security
Services used by Revenue Navigator and their data processing details.
This register lists the third-party services used by Strategos Analytics in connection with the Revenue Navigator platform. It is maintained as part of our GDPR Article 28 obligations and updated when providers are added, changed, or removed.
Transfer mechanisms under review
International transfer mechanisms for several providers are being actively assessed. Fields marked Under review will be updated as that work progresses. We do not claim SCCs, adequacy decisions, or other transfer safeguards as implemented until the supporting contracts and compliance records are confirmed.
Services contracted directly by Strategos Analytics to operate the Revenue Navigator platform. As data processor, we are responsible for ensuring appropriate agreements and transfer safeguards are in place with each of these providers.
| Provider | Role | Data categories | Region | DPA / Terms | Transfer mechanism |
|---|---|---|---|---|---|
| DigitalOcean, LLC | Cloud infrastructure — web server, worker server, managed PostgreSQL, managed Redis/Valkey | All personal data processed by the platform, including CRM records, user accounts, OAuth tokens, session data, integration credentials, logs, and exports | Amsterdam, Netherlands (ams3 — EU) | DigitalOcean Data Processing Agreement | EU-hosted |
| Twilio SendGrid | Transactional email delivery (account invitations, magic links, notifications) | Email addresses, names, email metadata, and message content required for delivery | USA | Twilio Data Protection Addendum | Under review |
| Cloudflare, Inc. | CDN, DDoS protection, and DNS — all platform traffic passes through Cloudflare | Network traffic metadata; HTTP request/response data in transit (may include personal data depending on request content) | Global (traffic may be routed outside EEA) | Cloudflare Data Processing Addendum | Under review |
| Stripe, Inc. | Payment processing, subscription management, billing portal, billing webhooks | Billing contact details, customer identifiers, subscription status, invoice and payment metadata, webhook payloads | USA | Stripe Data Processing Agreement | Under review |
These integrations are activated only when a customer connects their own account. The customer has a direct relationship with the provider and directs Strategos Analytics to access data on their behalf. Customers are responsible for their own agreements with these providers, including applicable DPAs.
| Provider | Role | Data categories | Region / status |
|---|---|---|---|
| HubSpot, Inc. | CRM data source via OAuth — syncs contacts, companies, deals, pipeline metadata, and CRM events | CRM records, contact details, company/account data, deal/opportunity data, owner/activity metadata, OAuth tokens | USA — international transfer mechanism to confirm before production use |
| Stripe, Inc. | Billing data source and payment webhooks | Customers, subscriptions, invoices, payments, webhook payloads | USA — international transfer mechanism to confirm before production use |
| Zendesk | Support ticket data source | Tickets, requester/user data, organizations, support metadata, API credentials | To verify before production enablement |
| Planhat | Customer success data source | Customer/account records, contacts, health profiles, renewal/opportunity metadata, API credentials | To verify before production enablement |
| Slack Technologies, LLC | Alerts, digests, channel selection, and Slack OAuth for integration connect | Workspace/team IDs, channel IDs/names, OAuth tokens, alert and digest message content, delivery metadata | To verify before production enablement |
The following identity providers are used for SSO login or integration authorisation. They may act as independent data controllers for the authentication flow and are listed here for completeness. Data processed is limited to identity attributes needed at login: subject ID, email, email verification status, and profile basics.
Google LLC
Google OAuth / OIDC sign-in and account linking
Microsoft Corporation
Microsoft OAuth / OIDC sign-in and account linking via Microsoft identity platform / Azure app registration
Slack Technologies, LLC
Slack OAuth for integration connect and account authorisation
The following providers are present in the Revenue Navigator product catalogue or integration roadmap but are not currently active production sub-processors. No customer data is processed by these services until an integration is enabled and the necessary contracts are in place.
| Provider | Category | Integration purpose | Status |
|---|---|---|---|
| Salesforce CRM | CRM | Accounts, contacts, opportunities, ownership, and activity sync | Not active |
| Pipedrive | CRM | Deals, persons, organizations, activities, and pipelines | Not active |
| Zoho CRM | CRM | Accounts, contacts, deals, owners, and activities | Not active |
| ActiveCampaign | CRM / marketing automation | Marketing automation, lead scoring, and pipeline attribution | Not active |
| Freshsales | CRM | CRM deal velocity and win-rate analysis | Not active |
| Microsoft Dynamics 365 Sales | CRM | Enterprise sales data and cross-platform revenue intelligence | Not active |
| Keap | CRM | Small-business CRM and sales pipeline data | Not active |
| Insightly | CRM | Relationship management CRM and post-sale revenue attribution | Not active |
| Zendesk Sell | CRM | CRM integration complementing Zendesk support signals | Not active |
| ServiceNow CRM | CRM | Enterprise sales force automation and pipeline data | Not active |
| Monday.com CRM | CRM | Deal tracking and pipeline management | Not active |
| Intercom | Support / customer engagement | Conversations, contacts, companies, engagement, and support-pressure signals | Not active |
| Freshdesk | Support | Tickets, contacts, companies, SLA, and agent metadata | Not active |
| Help Scout | Support | Conversations, customers, mailboxes, tags, and workflows | Not active |
| Salesforce Service Cloud | Support | Case management and service-resolution data | Not active |
| Front | Support | Shared inbox and customer conversation data | Not active |
| Zoho Desk | Support | Helpdesk ticket data | Not active |
| Gorgias | Support | Ecommerce customer support signals | Not active |
| Kustomer | Support | Omnichannel support and customer health data | Not active |
| ServiceNow CSM | Support | Enterprise customer service management data | Not active |
| Gainsight Customer Success | Customer success | Health scores, lifecycle stages, and renewal signals | Not active |
| ChurnZero | Customer success | Customer engagement and churn-risk data | Not active |
| Totango | Customer success | Customer journey and segmentation data | Not active |
| Vitally | Customer success | B2B customer success metrics and NRR signals | Not active |
| Custify | Customer success | Customer health and lifecycle data | Not active |
| ClientSuccess | Customer success | Subscription health and engagement data | Not active |
| Catalyst | Customer success | Customer health and success-plan data | Not active |
| Velaris | Customer success | Customer success insights | Not active |
| Pylon | Customer success / support | B2B support and customer success data | Not active |
| Adyen | Billing / payments | Payment authorization, transaction, and reconciliation data | Not active |
| Checkout.com | Billing / payments | Global payment acceptance data | Not active |
| Worldpay | Billing / payments | Transaction processing and settlement data | Not active |
| PayPal / Braintree | Billing / payments | PayPal and Braintree transaction streams | Not active |
| 2Checkout | Billing / payments | Global digital commerce and subscription billing data | Not active |
| Mollie | Billing / payments | European payment gateway transactions | Not active |
| Microsoft Teams | Communication | Revenue alerts and pipeline updates to Teams channels | Not active |
| Chanty | Communication | Team messaging notifications | Not active |
| Discord | Communication | Revenue operations alerts to server channels | Not active |
| Flock | Communication | Deal and forecast notifications to channels | Not active |
| Twist | Communication | Async revenue updates and pipeline summaries | Not active |
| Pumble | Communication | Team communication alerts | Not active |
Customer-configured webhooks are a product capability, not a third-party sub-processor selected by Revenue Navigator. Outbound webhook endpoints are configured by the customer and are not covered by Strategos sub-processor obligations.
If you have questions about this register, need to verify sub-processor status for a security review, or would like to be notified when this register is updated, contact privacy@strategos-analytics.com.
For the full security overview and our Data Processing Agreement, see the Security page and DPA.