Subprocessors & Data Processing

Two roles we play

When we talk about your data, we are actually talking about two different kinds of information, and we play a different role for each:

• Account and billing data: your name, email, and subscription details. Here, Cyber Ultimax Ltd is the data controller: we decide why and how this information is used, as described in our Privacy Policy.
• Business operational data: the CRM contacts, employee and payroll records, financial records, and commerce data that you or your team enter into a workspace. Here, you (the business) are the data controller, and Cyber Ultimax Ltd is the data processor: we process this data only to provide the Services, following your instructions as expressed through your use of the console.

Our subprocessors

We use the following categories of subprocessor to deliver the Services. We choose providers that maintain appropriate security and confidentiality commitments, and we only share the data each one needs to perform its function.

• Payment processors: Paystack, Flutterwave, and Stripe process your subscription payments and Partner Program payouts.
• AI provider: Anthropic provides the AI models behind Advisor and other AI-assisted features. When you use one of these features, the relevant business data you have entered is sent to Anthropic to generate a response.
• Cloud hosting: Amazon Web Services (AWS) hosts our infrastructure, application data, and file storage.
• Email and SMS delivery: we route transactional messages (verification, password reset, invitations, and notifications) through email and SMS providers selected for reliability and region, which may include Amazon SES, SendGrid, Mailgun, Twilio, Termii, or Africa's Talking.

How AI processing works

AI-assisted features only process the specific data relevant to the request you make, for example, the business details you are analysing in a SWOT exercise, not your entire workspace. Our AI provider processes this data to generate a response for you and does not use it to train models for other customers. If you would rather not send certain data to our AI provider, avoid entering it into an AI-assisted feature; the rest of the console works independently of these features.

International transfers

Several of our subprocessors operate outside Nigeria, including in the United States. Where business operational data is transferred internationally as part of providing the Services, we require our subprocessors to maintain appropriate security and confidentiality protections.

Changes to this list

We may add or change subprocessors as we improve the Services. We will update this page when we do, and update the "Last updated" date above.