Subprocessors
Last updated: 2026-10-23
These are the vendors 180 Degrees IT Solutions uses to run BrightMesh Tables, the purpose of each, the data it receives and the country it processes that data in. They are described in more detail in our Privacy Policy.
Who is responsible
180 Degrees IT Solutions (ABN 20 109 249 863, PO Box 284, Yungaburra QLD 4884), an Australian business. Contact: kevin@180degreesit.com.
Vendor list
| Vendor | What it does for us | Data it receives | Where it processes data |
|---|---|---|---|
| Anthropic (Claude API) | Generates answers and actions for the in-app AI features when you use them. | The prompt and the workspace data needed to answer it or carry out the action. Not used to train Anthropic's models under its commercial API terms. | Outside Australia |
| Your workspace's own AI provider (optional) | Replaces Anthropic for a workspace whose admin has configured an OpenAI-compatible provider with their own key. | That workspace's AI prompts and the data needed to answer them. Only the workspaces that configure it send anything. | Chosen by the workspace |
| SMTP2GO | Delivers the email we send: invitations, reminders, digests and automation emails. | Recipient address, subject and body of each message we send. It does not send marketing email. | Not restricted to Australia |
| Cloudflare (proxy and network) | Carries all traffic to and from the app and filters abusive requests. | Every request and response in transit, including IP addresses and user agents. | Global network, many countries |
| Cloudflare Email Routing and Email Worker | Receives email sent to a workspace's inbound addresses and passes it to the app. | Sender address, subject, body and attachments of each inbound message. | Global network, many countries |
| Cloudflare Turnstile | Tells people from bots on the public request form. | A challenge token and browser signals, including IP address, from people who open the request form. | Global network, many countries |
| Cloudflare R2 (storage) | Held database backup copies. Automatic upload was switched off on 2026-10-11. | Database backup copies made before then, which may still exist until they are deleted. | Chosen by Cloudflare |
| Microsoft (sign-in and Microsoft Graph) | Signs people in with Microsoft, and lets a workspace admin pick people from their Microsoft 365 directory to invite. | For sign-in: name and email address. For directory lookup: each person's display name, email address, user principal name and whether the account is enabled. The directory list is shown once and not saved. | Microsoft's global identity service |
| Microsoft Azure Key Vault | Stores our operational secrets: database credentials, signing secret and encryption keys. | Secrets for running the service. No customer workspace content. | Australia (Australia East) |
| Destinations your workspace chooses (webhooks, Slack, Zapier, Make and similar) | Workspace admins can send row data to addresses and tools they choose, for example through a webhook, a Slack connection or an automation tool. | Whatever the workspace sends: the data in the rows and fields its automations and webhooks are set up to deliver. | Wherever the recipient processes it. The workspace, not us, chooses the recipient and is responsible for it. |
| Hosting provider (Host Universal Pty Ltd) and Coolify | Runs the app and its database on a virtual server we manage, deployed with Coolify. | Everything stored in the service, including workspace content and the encrypted backups kept on the server. | Australia (the server's network address is registered to Host Universal and located in Melbourne) |
Changes to this list
We add a vendor to this page, and change the date at the top, before that vendor starts processing customer data. If you do not agree to a change, email kevin@180degreesit.com and we will talk to you about it.