Subprocessor Register
Last updated: October 15, 2026
This register distinguishes active production processors from planned integrations. A planned provider does not receive applicant data until it is contracted, configured, disclosed, and activated.
| Provider | Purpose and data | Status |
|---|---|---|
| Cloudflare, Inc. | DNS, CDN, security, Pages/Workers execution, D1 operational records, KV session data, encrypted private R2 storage of documents and funding-call recordings Stelo staff upload and of signed agreements and signing records and bank data received from Stripe, and PDF page rendering for uploaded documents in private Containers without internet access. While Stelo's read-only link to Titanova's and Arcadia's mailboxes is switched on, also encrypted private R2 storage of that email and its attachments, and of files linked from it in Google Drive, page rendering of those attachments, and D1 records built from them: each funding request's progress, figures read from attachments, and Stelo's internal underwriting dataset | Active; Titanova and Arcadia email and attachments only while that link is switched on |
| Cloudflare, Inc. (Workers AI) | Transcribes funding-call recordings Stelo staff upload, using the Deepgram Nova-3 speech-to-text model hosted by Cloudflare. Receives the call audio, which can include names, contact details, business and financial information, and any identification or account numbers spoken on the call. Stelo's requests ask to opt out of Deepgram's model-improvement program. Staff review the transcript before relying on it. | Active for staff call transcription |
| OpenRouter | API routing for AI-assisted extraction of fields from documents Stelo staff upload for a funding request, and for summaries of funding-call transcripts. Receives page images or text of those documents, which can include names, contact and identification details, bank account numbers, financial information, credit-report contents, and DataMerch or court and lien search results, and the text of call transcripts with Social Security, account and similar numbers masked. While Stelo's read-only link to the work mailboxes of Titanova and Arcadia, the affiliated brokerages Stelo owns, is switched on, also the subject and text of emails read from them, with Social Security, account, routing and similar numbers masked, and the names of their attachments, and page images or text of attachments and of files linked from those emails in Google Drive, such as bank statements, applications, and funders' offers, contracts and declines, once per file; files whose name or email marks them as identification, voided checks or tax returns are never sent, nor are files whose text looks like it holds online-banking login details, image-only applications, unsorted PDFs that are scans or show identification, check, tax-return or Social Security number details, or anything from an email whose text looks like it contains online-banking login details. Stelo's requests restrict routing to DeepInfra with fallbacks disabled, ask for zero-data-retention routing, and deny provider data collection. OpenRouter keeps request metadata. | Active for staff document extraction and call summaries; Titanova and Arcadia email and attachments only while that link is switched on |
| DeepInfra | Hosts the DeepSeek V4.1 Flash model, and for Titanova and Arcadia email and attachments also the GLM 5.3 Flash model when Stelo chooses it or compares the two on a sample, with the same provider settings; the model reads the same page images, text, masked call transcripts, masked email text or email attachments and returns proposed field values, a short call summary with the details discussed, a proposed label and details for an email, or figures read from an attachment. Stelo staff review each proposed value before it is added to a lead or deal. | Active for staff document extraction and call summaries; Titanova and Arcadia email and attachments only while that link is switched on |
| Anthropic, PBC | Claude, used by Stelo administrators through their own Claude accounts, with the setting that lets Anthropic use their chats to improve its models turned off, to ask read-only questions about Stelo's internal business records for internal analysis. Receives Stelo's funding, deal, lead and commission records: names of businesses, owners, funders, reps and staff, business contact details such as email addresses and phone numbers, amounts, terms, statuses and dates, contact-request answers, campaign tags, ad click IDs and browser privacy signals, lists of deal documents without their contents, records of Stelo's own ACH payments, deal email subjects and short AI summaries of deal emails with Social Security, tax ID, account, routing, phone and similar numbers removed, bank statement totals such as deposits, balances and NSF counts, and, once switched on, investor numbers, contribution amounts and dates and onboarding status without names or contact details. Never receives the text of emails or attachments, document contents or file names, identification images, copies of bank statements, Social Security or tax ID numbers, bank account, routing or card numbers, driver's license or other ID numbers, bank logins, or bank data from Stripe. | Active for staff analysis |
| Google LLC (Google Workspace) | Stelo staff email, including messages and attachments sent to Stelo staff. While Stelo's link is switched on, also read-only access, granted by Titanova and by Arcadia each in its own Google Workspace, to their work mailboxes, attachments and lists of users, and, while Stelo's link to Drive files is switched on, to Google Drive, Docs, Sheets, Slides and Drawings files linked in that email, never browsing or listing anyone's Drive | Active; Titanova and Arcadia mailbox access only while that link is switched on |
| PostHog, Inc. | Website analytics on public pages only, hosted in the United States: page views, clicks, browser errors, page speed, and session replays with everything typed into the contact form hidden; browser and device information; the IP address, which PostHog may use to estimate an approximate location; page addresses without query values and the referring site; and a random ID kept in the browser. No names, email addresses, or phone numbers. Not loaded on staff, investor, signing, bank-link, or document pages, or when the browser sends Global Privacy Control or Do Not Track | Active |
| Resend | Transactional email. Staff alerts: staff email addresses, minimal lead-notification references, authenticated workspace links, and, for declined agreements and funding-package answers, the deal number, business name, the name of the person who declined, and the reason or note given, with notes left out when they look like they contain bank details, an SSN, an EIN, or a date of birth. Internal alerts to Stelo admins about specific deals (returned or missed payments, merchant bank monitoring, stop requests, wire plans, fees waiting, deals funded, and state reviews) include each deal's business name, DBA, and owner name, never amounts or account numbers. Agreement signing, document sharing, bank linking, and funding packages: the recipient's name and email address, one-time verification codes, private links, and, in funding-package emails to Stelo's funding mailbox, the deal name and funding amounts; no bank details are included | Active for staff lead alerts and bank-link, signing, and document-sharing emails; funding-package emails once that feature is switched on |
| Stripe, Inc. | Bank account linking for funding review (Stripe Financial Connections), based in the United States. A business owner links business bank accounts in Stripe's window; Stripe then shares with Stelo, read-only, the bank's name, the last four digits of each account, balances, the account owner names and mailing addresses, and up to 180 days of transactions. On deals Stelo funds itself or co-funds, the same link supports monitoring after funding, under the consent given when linking, until Stelo staff turn it off; monitoring after funding is not switched on yet. Stelo never sees the bank login typed into Stripe's window. Stelo keeps this data with the deal record, never sells it or uses it for marketing, as a consumer report, or to train models, and does not send it to AI or analytics providers. | Active for bank linking; monitoring after funding not switched on yet |
| Reconciliation or fraud-review provider | Statement reconciliation and fraud review | Not selected or active |
| Google LLC (Google Ads) | Ad conversion measurement on public marketing pages through the Google Ads tag: page path with campaign parameters and click identifiers, referrer without query values, browser and device information, and advertising cookies. Remarketing, personalized advertising and user-provided data are turned off; the tag is not loaded when the browser sends Global Privacy Control or Do Not Track. Reporting qualified or funded outcomes back to Google is not active. | Active (conversion measurement only) |
Stelo sends a document to OpenRouter and DeepInfra only after staff confirm it contains no online-banking usernames, passwords, or security answers. Other uploaded documents are stored and previewed only within Cloudflare. Funding-call recordings stay in Cloudflare and are transcribed by Cloudflare Workers AI; only the masked transcript text is sent to OpenRouter and DeepInfra for a summary. While Stelo's read-only link to Titanova's and Arcadia's mailboxes is switched on, email read from them is first checked by fixed rules; newsletters, sign-in codes, calendar invitations, automatic replies, lawyers' email, internal chat and any email whose text looks like it contains online-banking login details, with its attachments, are never sent to OpenRouter or DeepInfra. Neither are files whose name or email marks them as identification, voided checks or tax returns, files whose text looks like it holds online-banking login details, applications that are only scanned images, or unsorted PDFs that are scans or whose text shows identification, check, tax-return or Social Security number details. Records built from that email, including Stelo's internal underwriting dataset, stay in Cloudflare and are not sold or shared. Bank data Stelo receives from Stripe is stored only in Cloudflare and is not sent to OpenRouter, DeepInfra, PostHog, or any other AI or analytics provider. See AI and Data Use.
Applicant information is not sent to Mobbin, Higgsfield, or other tools used solely to research or produce non-applicant website design assets.