Vendors
Vendor / Subprocessor List
Current and anticipated service providers, subprocessors, payment processors, infrastructure vendors, AI providers, and provider legal links.
This list identifies vendors and service providers that Clearstep Systems may use to operate the website, process payments, communicate with clients, build software, support projects, or provide AI-assisted services. Vendors may change over time.
Current and Anticipated Vendors
| Provider | Purpose | Possible data involved | Notes |
|---|---|---|---|
| Stripe | Payments, invoices, receipts, subscriptions, payment methods, billing records, fraud prevention. | Billing contact details, payment references, transaction data, and card/payment information handled by Stripe. | Stripe terms and privacy policies apply to Stripe processing. See provider legal links below. |
| Google / Firebase | Website hosting, authentication, database, Firestore, storage, logs, and app infrastructure. | Account data, project records, portal records, files, usage logs, and security logs. | Used for site and portal infrastructure where configured. See provider legal links below. |
| Gmail / Google | Email communication and business correspondence. | Emails, attachments, contact details, and project communications. | May be replaced or expanded with Google Workspace. |
| OpenAI | AI assistance, API use, ChatGPT, Codex-related tools, coding, drafting, summarization, and analysis. | Prompts, code, project context, redacted or sanitized records, or sensitive data only with consent. | Use depends on the project and data sensitivity. See provider legal links below. |
| Anthropic / Claude | AI assistance, Claude tools, coding, drafting, summarization, and analysis. | Prompts, code, project context, redacted or sanitized records, or sensitive data only with consent. | Use depends on the project and data sensitivity. See provider legal links below. |
| Google Gemini / Google AI | AI assistance when used for a project. | Prompts, code, project context, redacted or sanitized records, or sensitive data only with consent. | Use depends on the project and data sensitivity. |
| Cloudflare Turnstile | Spam and bot prevention if enabled on forms. | Browser/device signals and challenge data. | Used only where form protection is enabled. |
| Subcontractors | Project support, development, design, implementation, QA, documentation, and specialized support. | Project data only as needed for assigned work. | Subject to confidentiality obligations; sensitive-data access should be disclosed in the written scope where appropriate. |
Provider Legal Links
Provider terms, privacy practices, data controls, and product features may change. These links are provided for convenience and do not replace the provider's own terms.
- OpenAI Services Agreement
- OpenAI Service Terms
- OpenAI Data Processing Addendum
- OpenAI Data Controls
- OpenAI Terms of Use
- OpenAI Codex Docs
- Anthropic Commercial Terms
- Anthropic Consumer Terms
- Anthropic Privacy Policy
- Claude Code Legal and Compliance
- Stripe Legal Hub
- Stripe Privacy Policy
- Firebase Terms
- Firebase Privacy and Security
- Firebase Data Processing and Security Terms
- HHS Business Associate Contract Guidance
- Placer County Fictitious Business Name Statements