SignalWealth Inc. uses the service providers below to run SignalWealth. Each receives only the data it needs for its job, under written terms that require it to protect that data. See our Security page and Privacy Policy for how we protect data ourselves.
Our subprocessors
| Provider | What we use it for | Data it handles | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting: the application server, its encrypted database disk, client-portal document storage, encrypted off-site database backups, audit trail (CloudTrail) | All platform data, including firm and client records, documents, recordings and backups | United States (US East, N. Virginia) |
| Postmark (ActiveCampaign, LLC) | Sending email (system mail, client emails, newsletters, sign-in codes, e-signature links) and receiving replies | Recipient names and addresses, email content and attachments | United States |
| Telnyx LLC | Texting, calling, call recording, voicemail drops, fax and number porting | Phone numbers, text and call content, call recordings (copied to our own storage right away), fax documents | United States |
| Plaid Inc. | Clients connect outside bank and investment accounts in the client portal | Institution name, account names, types, last four digits and balances; the connection token (encrypted before storage). Clients sign in on Plaid's own page; we never see their bank credentials | United States |
| Anthropic, PBC | AI features: Studio writing and compliance checks, call and meeting summaries, the AI assistant for texts and website chat, the in-app help assistant | The text needed for each request: scripts and articles; call and meeting transcripts and text conversations when a firm turns those features on | United States |
| ElevenLabs, Inc. | Transcription of Studio recordings and of call and meeting recordings; AI voices for firm content | Audio of recordings (calls and meetings can include clients), scripts, an advisor's voice samples when they create their own voice | United States |
| HeyGen Technology Inc. | On-camera video (Persona): lip-sync on the advisor's own footage and digital twins | The advisor's footage, likeness and voice, and video scripts. No client records | United States |
| Stripe, Inc. | Subscription billing and payments | The firm's billing contact and invoices. Card details go straight to Stripe. No client data | United States |
| Expo (650 Industries, Inc.), with Apple Push Notification service and Google Firebase Cloud Messaging | Delivering push notifications to the SignalWealth mobile app | The device's push token and the notification text, which can include a contact's name and the start of a text message | United States |
| Google LLC (Google Fonts) | Web fonts on SignalWealth pages | The viewer's IP address and browser details when a page loads. No account or client data | United States / global |
| Google LLC (Google Analytics) | Visitor analytics on signalwealth.io and the trial signup pages only (never inside the CRM, portal or firm pages) | Pages visited, device and approximate location of website visitors. No names, emails or client data | United States / global |
| Cloudflare, Inc. (Turnstile) | Bot checks on signalwealth.io forms | Browser and device signals and IP address of people submitting website forms | Global |
| Website hosting provider for signalwealth.io | The public website, its forms (support requests, demo and webinar sign-ups, SMS opt-in) and DNS for signalwealth.io | What people type into website forms. No firm client records | United States |
| Microsoft Corporation (Microsoft 365) | SignalWealth's own business email, including the support@signalwealth.io address | Emails people send to SignalWealth, which can include whatever the sender writes | United States |
Services you connect
These services are used only when your firm or an advisor connects their own account. Data moves between SignalWealth and your account at that service, under your own agreement with it, and you can disconnect at any time.
| Service | What it's used for |
|---|---|
| Google (Calendar, YouTube, Sign in with Google) | Two-way calendar sync, posting videos, sign-in |
| Microsoft (Outlook / Microsoft 365) | Calendar sync and logging emails with contacts |
| Zoom | Meeting links on bookings; automatic meeting notes if turned on |
| Meta (Facebook, Instagram) | Posting approved videos; lead-ad leads into the CRM |
| Posting approved content to a profile or company Page | |
| Zapier, Make, n8n and other webhook tools | Signed webhooks the firm sets up |
| Wealthbox | One-time contact import with the firm's own token |
How we tell you about changes
- Before a new subprocessor starts receiving customer data, we email every firm admin and update this page at least 30 days in advance, saying who it is, what it will do and what data it will receive.
- If your firm objects on reasonable data-protection grounds, tell us within those 30 days. We'll work with you on an alternative; if we can't offer one, you may cancel the affected service and we'll refund any prepaid fees for the rest of the term.
- If we must replace a provider urgently (for example, to keep the service running or secure), we tell you as soon as we can and the same objection right applies.
- Our software checks for this: it is built so that a release fails its tests if the code starts sending data to an outside service that isn't on this list.
Questions: security@signalwealth.io.