Current and planned providers
Not every provider receives every organization’s data. Planned providers are identified below and are not yet active in the CrewSteps integration. Optional services depend on company configuration and the features a person uses. This is a technical provider overview, not an executed contractual subprocessor schedule.
20i / StackCP
HostingHosts the public website and application infrastructure. Processes website requests, application data, stored files, and operational logs needed to run the service.
20i / Stackmail
EmailThe configured CrewSteps SMTP service is routed through Stackmail. Handles recipients, message content, and delivery information for invitation and password-reset email when sent.
Google / Firebase
Authentication & notificationsSupports configured Google or phone sign-in and push-notification infrastructure. Relevant information can include account identifiers, phone numbers for verification, device tokens, and notification payloads.
Twilio
Text messagingSupports configured SMS delivery. When enabled and permitted, processes recipient phone numbers, message content, and delivery status. A configured connection does not guarantee that every messaging route is approved or available.
OpenAI
Optional training AIProcesses the course context, selected text, prompts, and documents an authorized administrator submits for an AI action. AI is optional; the manual course builder remains available. CrewSteps does not store the full AI prompt and response in its usage log. Provider retention is governed separately by the applicable provider terms.
Stripe
Planned · Payments & billingSelected as CrewSteps’ payment and subscription-billing provider. The integration is not active yet. When payments are enabled, Stripe may process customer contact and billing details, payment method information, and transaction and subscription records.
Stripe may act as a data processor or an independent controller, depending on the activity. See Stripe’s Privacy Policy for details.
Company-selected integrations and content
Your company may connect additional tools or provide content hosted by another service. The integration directory can include planned or test-mode providers; a listing alone does not mean that a live connection is processing data.
Review the actual integration status and permissions in your company account. Embedded videos or other third-party learning content may contact their host when used and have separate privacy practices.
Contract and location details
Legal contracting entities, processing locations, transfer safeguards, and applicable provider terms must be confirmed for the relevant service and agreement. This page does not promise EU-only or other region-restricted processing.
Request a customer-specific schedule or discuss a provider concern at info@crewsteps.com. Read the DPA request information if your organization needs binding processing terms.