Enterprise trust documentation by Megawebvision
RETURN TO CHIEF ↗PROVIDER TRANSPARENCY
Subprocessors
CHIEF uses carefully selected service providers to operate and deliver the service. The providers below may process Customer Personal Data on behalf of Megawebvision Inc. in connection with CHIEF.
Last updated: August 9, 2026
Authoritative registry
Current Subprocessors
Last updated: August 17, 2026
| Provider | Service | Purpose | Categories of data potentially processed | Role | Transfer safeguard | Effective date |
|---|---|---|---|---|---|---|
| Vercel | Hosting and Vercel Blob storage | Operate CHIEF application deployments and store private CHIEF intake records. | Customer intake details, request metadata and service content handled by the deployed application. | Hosting / storage provider | DPA and contractual safeguards; SCCs available where required. | August 9, 2026 |
| OpenAI | Optional Responses API model processing | Customer-requested, non-authoritative draft synthesis when the operator-enabled capability is used. | Prompt content, relevant business context and generated draft output. | Optional AI service provider | DPA and contractual safeguards; SCCs available where required. | August 9, 2026 |
| Google Analytics 4 website measurement; customer-requested Gmail, Calendar, Analytics and Search Console connections | Measure aggregate CHIEF use with coarse page categories and provide customer-requested communication, calendar, analytics and search-data capabilities when explicitly connected. | Technical browser and event data plus coarse CHIEF page categories for website measurement; messages, events, report data, search data and account identifiers within the requested connection scope. | Website measurement / optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 17, 2026 | |
| GoHighLevel | CRM connection | Provide customer-requested CRM, contact, custom-object and invoice capabilities for a resolved client and location. | Contact, custom-object, invoice and account data within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 9, 2026 |
| Jobber | Field-service connection | Provide customer-requested client, request, quote, job, visit and invoice reads for a verified account mapping. | Client, request, quote, job, visit, invoice and account data within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 9, 2026 |
| Semrush | SEO research connection | Provide customer-requested domain, keyword and backlink research. | Domain, keyword, backlink and account-related research data within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 9, 2026 |
| HubSpot | CRM and marketing connection | Provide customer-requested CRM, contact, company, deal and marketing workflow capabilities when explicitly connected. | Contact, company, deal, communication, custom-property and account data within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| Microsoft | Microsoft 365 connections | Provide customer-requested communication, calendar, file and collaboration capabilities when explicitly connected. | Messages, calendar events, files and account identifiers within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| WP Engine | Managed WordPress hosting | Host customer-requested WordPress websites and related application content when explicitly connected. | Website content, form submissions, access logs, backups and account data within the requested scope. | Optional hosting provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| Amazon Web Services | Cloud infrastructure and storage | Provide customer-requested compute, storage, delivery and infrastructure capabilities when explicitly connected. | Application data, logs, storage objects and account metadata within the requested scope. | Optional infrastructure provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| Ahrefs | SEO research connection | Provide customer-requested domain, keyword, backlink and competitor research. | Domain, keyword, backlink, competitor and account-related research data within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| CallRail | Call tracking and attribution connection | Provide customer-requested call tracking, attribution and lead-response capabilities when explicitly connected. | Call metadata, caller-provided details, recordings and transcripts where enabled, within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| monday.com | Work-management connection | Provide customer-requested project, task, workflow and collaboration capabilities when explicitly connected. | Projects, tasks, comments, assignees, attachments and workspace identifiers within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| ClickUp | Work-management connection | Provide customer-requested project, task, workflow and collaboration capabilities when explicitly connected. | Projects, tasks, comments, assignees, attachments and workspace identifiers within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| Asana | Work-management connection | Provide customer-requested project, task, workflow and collaboration capabilities when explicitly connected. | Projects, tasks, comments, assignees, attachments and workspace identifiers within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
| Airtable | Database and workflow connection | Provide customer-requested structured-record, workflow and collaboration capabilities when explicitly connected. | Bases, records, attachments, comments and collaborator identifiers within the requested scope. | Optional connected-service provider | DPA and contractual safeguards; SCCs available where required. | August 10, 2026 |
A provider listed as optional processes Customer Personal Data only when the customer requests the relevant functionality and authorizes or enables the connected service. Client-side libraries that do not process Customer Personal Data for CHIEF are not listed.
Registry governance
Changes to Subprocessors
CHIEF maintains this page as the authoritative public list of subprocessors used in connection with the service. Material updates are reflected here with an updated effective date.
Customers may review the service, purpose and data categories for each listed provider. Additional provider due-diligence materials and contractual terms may be requested through the DPA process .
Enterprise review
Questions or objections
Direct enterprise subprocessor questions or reasonable data-protection objections to the Privacy Officer at legal@megawebvision.com. Include the provider, the processing concern and the relevant customer or service context.