Subprocessors
Last updated: 2026-07-09
Snap Launch LLC uses the following third-party subservice providers to deliver the Rollover Analysis Tool. All Customer Information is stored and processed in the United States.
Critical — Customer Information
Purpose: Database hosting, authentication, row-level security
Data processed: Customer Information (client names, analysis data — encrypted at application layer), advisor profiles, audit logs
Location: United States (AWS)
Certification: SOC 2 Type II
Purpose: Payment processing, subscriptions, invoicing
Data processed: Advisor billing info, transaction IDs, subscription metadata. No credit card numbers stored on our servers.
Location: United States
Certification: PCI DSS Level 1
Important — Infrastructure
Purpose: Application hosting, CDN, serverless functions
Data processed: HTTP request metadata, IP addresses. No Customer Information stored at rest on Vercel.
Location: United States / Global edge
Certification: SOC 2
Purpose: Error monitoring and performance tracking
Data processed: Stack traces and request metadata. Sensitive fields redacted before transmission.
Location: United States
Certification: SOC 2
Purpose: Transactional email delivery
Data processed: Email addresses and auth-related email content. No client analysis data in emails.
Location: United States
Certification: SOC 2
Supporting
Purpose: AI-assisted features and internal signup outreach email drafting
Data processed: In-app prompt text submitted by users; for outreach, advisor signup metadata only (name, email, firm, report activity flags). No client analysis data or Restricted Customer Information.
Location: United States
Certification: —
Purpose: Contact enrichment for personalized signup outreach (internal automation)
Data processed: Advisor signup email and name for firm/title lookup. No client analysis data.
Location: United States
Certification: —
Purpose: Outbound welcome email delivery for new advisor signups (internal automation)
Data processed: Advisor email address and drafted welcome email content. No client analysis data.
Location: United States
Certification: —
Purpose: Operator notifications for outreach draft review (internal automation)
Data processed: Draft email previews and advisor first name/firm in notification text. No client analysis data.
Location: Global
Certification: —
Purpose: Workflow integration layer for internal outreach automation
Data processed: API routing metadata for outreach pipeline; may transit advisor signup metadata to registered subprocessors above. No direct production database access.
Location: United States
Certification: —
Purpose: Google Analytics and Google Tag Manager (optional, consent-gated)
Data processed: Anonymized usage analytics; marketing tags via GTM when consented
Location: United States
Certification: SOC 2 / ISO 27001
Purpose: Microsoft Clarity (optional, consent-gated)
Data processed: Anonymized session analytics
Location: United States
Certification: SOC 2 / ISO 27001
Purpose: Marketing measurement pixel (optional, consent-gated)
Data processed: Browser identifiers and page interaction data for audience insights
Location: United States
Certification: —
Purpose: Source code repository and CI/CD
Data processed: Source code and deployment configs (no Customer Information in repo)
Location: United States
Certification: SOC 2 Type II
Purpose: Policy drafting, audit preparation, compliance advisory
Data processed: Internal policy documents only. No access to production systems or Customer Information.
Location: Remote
Certification: NDA in place
Change Notifications
We update this page within 10 business days of any material change to our subprocessor list. Active customers are notified by email when a change materially affects data protection. To receive notifications, contact help@rolloveranalysistool.com.