Effective 2026-10-27

Security and Subprocessors

This page describes Digittle’s application safeguards and the services used to deliver it. It does not claim SOC 2, ISO or HIPAA certification, a business associate agreement, a guaranteed recovery time or an uptime service-level commitment.

Application safeguards

Digittle checks account ownership and shared-workspace permissions before returning protected records or accepting changes. Administrative permissions are separate from paid subscriptions. New research uses plan allowances and access checks. Customer-facing records retain relevant evidence and source links while excluding credentials, internal collection identifiers and private analysis instructions.

Subscriptions use Stripe-hosted checkout and billing management. The application verifies signed subscription events and retrieves Stripe’s canonical state before changing paid access. A success-page URL alone cannot grant a plan. Optional marketing tags are separated from private workspace and authentication pages.

Services and providers

The following services support Digittle or are available for selected research and marketing features. A service may not receive information for every request. Source publishers and public advertiser libraries have their own terms and are not automatically Digittle subprocessors.

Vercel and Render provide website and application delivery and backend hosting. Supabase provides authentication and cloud records. These functions can involve request, log, account and customer workspace information.

Exa, Tavily, NewsAPI.ai and Serper support search and discovery. DataForSEO supports organic search rankings and keyword data. Selected queries, domains, keywords and research context are sent as needed for those functions.

Apify and selected collection operators support public-source collection. Cloro and OpenRouter support selected AI-answer collection or routing. Anthropic supports AI-assisted analysis. Depending on the feature, these services can process research queries, selected context, returned source material and generated answers. A routing or marketplace service can involve downstream services or independent operators. Additional provider details and applicable contractual restrictions must be addressed in a customer’s processing agreement where required.

Resend supports configured service-message delivery. The selected authentication email service also processes confirmation and recovery messages. Google Workspace supports business correspondence and the Digittle support inbox.

Stripe supports subscriptions, payment methods, invoices and billing management. HubSpot supports enabled contact-management and public form workflows. Cookiebot supports public-site consent controls. Google Tag Manager carries the public tags configured by Digittle, including Google Analytics when enabled. Optional tracking follows the choices described in the Privacy Policy and Privacy choices page.

Provider and processing details

Contact info@digittle.ai for the provider and processing information needed for your agreement, including applicable legal entities, locations, authorized subprocessors and transfer terms. A customer-specific DPA must contain the agreed details before it is executed. This page does not replace that annex or grant authorization for unrelated processing. We retain private prompts, collection recipes, credentials and scoring implementation while providing the information required for customers to assess the processing.

Report an issue

Report a suspected security exposure to info@digittle.ai with the affected URL or workspace and enough detail to investigate. Do not include passwords, payment details or unnecessary personal information. Stop testing once you have enough information to report an issue; do not access another customer’s records or conduct intrusive testing without written authorization.

DIGITTLE LLC, 3954 Arsenal St, Saint Louis, MO 63116-3902, USA. Updated October 27, 2026.