What this list covers#
It covers the companies that process data on our behalf, for this application. It does not cover the phone line and the mailbox we use for our own correspondence, because those carry messages people send us directly and no customer or candidate data reaches them. It does not cover your own Microsoft 365, Google Workspace, video conferencing or telephony accounts, which are yours and are governed by your own agreements with those companies. And it does not list companies we have chosen but not yet started using, because they hold nothing.
The application is not built yet. What exists today is this website and the forms on it. The list below is short because the list is true, not because it is trimmed. It grows as the application is built, and we tell customers in writing before it changes.
The providers, all 2 of them#
Cloudflare, Inc.
What it does for us. Serves the Expanding Ranks website and runs the code behind our web forms and our phone and text webhooks. It also converts an inbound voicemail recording into text so we can read it.
What it can handle.
- A prospect’s email address, submitted to the waitlist form.
- A prospect’s reply address, organization and free-text message, submitted to the contact form.
- An inbound text message: the sender’s telephone number and the message body.
- An inbound voicemail recording, and the machine transcript derived from it.
- Client IP address, country, user agent and referer, captured with a form submission or observed at the edge.
All of it passes through Cloudflare in the clear while the code that handles it is running, because that code runs on Cloudflare. None of it is stored there. Cloudflare holds no database, no file store and no cache of ours, which we verify rather than assume.
Where it processes. Cloudflare’s global network, and we cannot promise you it stays in the United States. Cloudflare runs code at whichever of its locations is nearest the person making the request, and the control that would restrict that to United States locations is only sold on Cloudflare’s enterprise plan. We are telling you this plainly rather than implying a guarantee we do not have. What limits the exposure is that nothing is stored here: data is in Cloudflare’s hands only for as long as a single request is being handled, and it comes to rest in the United States, in the database below.
What we have not yet agreed with them in writing. We do not yet have a data processing agreement, a written commitment that they will not use what we send them to train or improve their own models and a written commitment about what else they may do with what we send them. Expanding Ranks LLC was formed on September 25, 2026 and no vendor agreement has been executed yet. We are telling you that rather than leaving the column blank.
Neon, Inc.
What it does for us. The managed database that stores what you send us through the forms on this website, and that will hold the application’s records when the application exists.
What it can handle.
- A prospect’s email address, submitted to the waitlist form.
- A prospect’s reply address, organization and free-text message, submitted to the contact form.
- Client IP address, country, user agent and referer, captured with a form submission or observed at the edge.
This is the only provider on the list that stores anything. Inbound text messages and voicemail do not reach it.
Where it processes. Ohio, United States. Every one of our databases with this provider is in its US East region, checked directly against the provider’s own records on September 26, 2026. A database’s region is fixed when it is created and cannot be moved afterwards, so this is not a setting somebody could change by accident.
Runs on Amazon Web Services. This database provider runs on Amazon Web Services, in an Amazon data center in Ohio. We name Amazon here because the answer to “where is my data” is an Amazon region, so leaving it out would make the answer incomplete. We hold no Amazon account of our own and nothing of ours runs on Amazon directly.
What we have not yet agreed with them in writing. We do not yet have a data processing agreement, a written commitment that they will not use what we send them to train or improve their own models and a written commitment about what else they may do with what we send them. Expanding Ranks LLC was formed on September 25, 2026 and no vendor agreement has been executed yet. We are telling you that rather than leaving the column blank.
Companies we use that are not on this list#
Named so that an absence reads as a decision rather than a gap.
| Company | Why it is not a service provider for the application |
|---|---|
| Cloudflare Workers AI | Not a separate company. It is a Cloudflare service, on the same Cloudflare account and under the same contract, so it is covered by the Cloudflare entry above rather than listed twice. |
| Telnyx | The phone company behind our own phone number. It carries calls and texts people send to us directly. No customer or candidate data reaches it, and for those messages we are answering our own mail rather than handling anything on a customer’s behalf. |
| Google Workspace | Our own email. It receives messages people send to us. No customer or candidate data reaches it. This is separate from your own Google Workspace account, which is yours and is covered by your own agreement with Google. |
| Resend | Sends our internal notifications to ourselves, and nothing else. It does not send anything to your people or to candidates. The day it does, it joins this list and we tell you in writing first. |
| Amazon Web Services | Our Amazon account holds deployment infrastructure only: the machinery our engineers use to ship code, and the permissions that let it run. No part of the application runs there, and no customer or candidate data is stored there. Amazon does appear once on the list above, as the company our database provider runs on, and that is noted on the database entry. |
| GitHub | Where our source code lives. No customer or candidate data is stored there, and it holds no key that would let it reach any system that does. We check that rather than assume it. |
| GoDaddy | Where our domain name is registered. It holds our own registration details and is not involved in handling your data at all. |
| Mercury | Our bank. No customer, candidate or personal data reaches it. |
| Trello | Our internal task board. It records what we worked on and for how long, and no customer or candidate data goes on it. |
If something here is wrong#
Use the contact form on our Support page. We would rather correct this than have you rely on it.