Trust
Subprocessors
These are the vendors that can process customer data on our behalf — your account, your Microsoft tenant content, and anything the product handles for you. The list is complete as of the review date: if a vendor is not on it, your customer data does not reach it.
Our platform pages do not load third-party advertising trackers. Selected public marketing pages use Vercel Speed Insights for performance measurement. A customer may configure a Meta Pixel or Google tag for that customer's branded short-link redirect. It is not loaded until the visitor affirmatively allows analytics for that visit; continuing without analytics reaches the same destination, and a Global Privacy Control signal bypasses the tag. The customer controls the tag account, so those providers are not our subprocessors. The privacy notice explains the choice and the prior TikTok configuration that was disabled on September 11, 2026.
Last reviewed September 28, 2026
| Subprocessor | Purpose | Data categories | Processing region | More |
|---|---|---|---|---|
| Ingram Micro | Distributes Microsoft 365 subscriptions and processes customer setup, subscription orders, delivery status and renewal instructions. |
| Ingram Micro cloud services and its processing network; a single exclusive processing region is not specified for this integration. | ingrammicro.com |
| 20i | Hosts eligible WordPress websites, their databases and the separate 10 GB WordPress email service; provides hosting administration and backup functions. |
| The location assigned to the hosting package and the provider's operational network; this integration does not promise processing exclusively in one country. | 20i.com |
| Microsoft | Your Microsoft 365 tenant is the system of record for managed workplace services. Microsoft Graph connects those services; Azure runs automations, cloud video rendering, narration, and private media storage. |
| Your tenant's own Microsoft region, chosen by you at sign-up; our Azure automation resources run in the United States. | microsoft.com |
| Google Cloud / Firebase | Provides authentication and the application database used for customer accounts, product records, and saved projects. |
| United States | cloud.google.com |
| Vercel | Hosts and serves the web application and its API routes. Vercel AI Gateway authenticates and routes Qwen website-design and video-planning requests to an approved model provider. Measures loading performance on selected public marketing pages using Speed Insights. |
| United States (primary application deployment region), with a global edge network and AI provider routing. | vercel.com |
| Stripe | Processes all card payments and subscription billing. Card details are entered directly into Stripe and are never sent to, or stored on, our servers. |
| United States | stripe.com |
| Tucows / OpenSRS | Provides the registry connection behind domain registrations and the infrastructure behind custom-domain mailboxes purchased through our storefront. |
| OpenSRS-operated infrastructure; processing location depends on the service and provider network. | opensrs.com |
| Resend | Delivers transactional email — sign-in and verification messages, receipts, support replies, and automation notifications. |
| United States | resend.com |
| Google (Gemini API) | Runs model calls for the storefront assistant, logo prompts, and content tools. It does not design or refine websites. |
| United States | ai.google.dev |
| Alibaba Cloud / Fireworks AI (Qwen) | Serves Qwen 3.8 Max for website generation, refinement, and cloud video planning through Vercel AI Gateway. Each request requires zero-data-retention-capable routing. |
| Provider processing network. Saved customer accounts and website projects remain in our United States Firebase database; model processing is transient and is not represented as US-only. | vercel.com |
| Higgsfield (including ByteDance Seedance) | Generates short Seedance video clips and Higgsfield images from visual prompts for cloud video drafts. |
| Higgsfield and its model-provider network; processing is not restricted to a verified single region. Finished ID360 drafts are stored privately in Azure in the United States. | higgsfield.ai |
| Zernio | Connects company social accounts and handles supported publishing, scheduling, public engagement, and analytics features. |
| Zernio and connected social-platform processing networks; no single processing region is guaranteed. | zernio.com |
| Self-hosted inference provider (not currently in use) | A separate inference path exists in the codebase for open-weight managed-workplace experiments. It is not the Qwen website designer and does not serve a shipping customer feature today. |
| United States | Details |
About the AI inference row
Qwen website-design and video-planning requests are routed through Vercel AI Gateway using the provider and zero-data-retention requirements disclosed in the table above. The separate inference path used for internal experiments resolves its endpoint from configuration at runtime and checks it against the following host allowlist. That experimental path does not serve the Qwen website designer or another shipping customer feature today:
- Azure AI Foundry
*.services.ai.azure.com - DeepInfra
api.deepinfra.com - Together AI
api.together.xyz - Fireworks AI
api.fireworks.ai
No customer content is currently sent through this experimental path. If that changes, the active provider and processing location will be disclosed here before the feature ships.
When this list changes
Adding a subprocessor means changing this page and the review date on it. If you are a managed customer and want to be told directly before a new subprocessor starts handling your data, ask us at legal@impressionsdirect360.com and we will add you to the notice list. We would rather keep a short list of people to email than promise a mechanism we have not built.
Listing a vendor here is not a statement about their certifications or ours. We hold no security certification of our own — see what we do and do not claim.