Subprocessors

Version of 2026-10-19

Our providers

These are the providers that The Climb actually calls in order to work. This list is annex 3 of the data processing agreement.

The "For whom" column shows whether a provider processes data of our clients' team members (it is then a subprocessor under the data processing agreement), or only data The Tech Nation is responsible for (buyers, visitors, Yetis).

For providers located outside the European Union, the transfer relies on the safeguards offered by the provider (Data Privacy Framework or standard contractual clauses).

ProviderServiceData concernedFor whomLocationTransfer safeguardsProcessing agreement
Vercel Inc.hosting of the application and its server functionsevery request: IP address, browser, page addressesclients and The Tech NationUnited States (functions run in the Washington region; entry points worldwide)Data Privacy Framework or standard contractual clauses, according to the safeguards offered by the providerhttps://vercel.com/legal/dpa
Convex, Inc.database, server functions, file storage (logos), scheduled tasksall application dataclients and The Tech NationUnited States (default region)Data Privacy Framework or standard contractual clauses, according to the safeguards offered by the provideron the provider's website
Clerk, Inc.accounts, login, invitations and login emails, authorisation of MCP accessname, email, role, company, Yeti code, login logsclients and The Tech NationUnited StatesData Privacy Framework or standard contractual clauses, according to the safeguards offered by the providerhttps://clerk.com/legal/dpa (its own subprocessors: https://clerk.com/legal/subprocessors)
Anthropic, PBCAI assistant (Claude) used by The Tech Nation team for support and administration, through the application's MCP integrationwhen a request requires it: names, email addresses, roles and account status, applications and requests receivedclients and The Tech NationUnited StatesData Privacy Framework or standard contractual clauses, depending on the safeguards offered by the providerhttps://www.anthropic.com/legal/commercial-terms
Stripe (Stripe Payments Europe, Ltd.)payments, subscriptions, invoices, VAT, promo codeslegal name, contact email and name, VAT number, billing address, payment method, Yeti code and priceThe Tech NationIreland; possible transfers to Stripe, Inc. in the United StatesData Privacy Framework or standard contractual clauses, according to the safeguards offered by the provideron the provider's website
Brevosending emails: request acknowledgements, AI Maturity Path team links, Yeti feedback and applications sent to our team, welcome email for an accepted Yetiemail, company, content of requests, feedback and applicationsThe Tech NationEuropean Unionprovider based in the European Union; for any transfer, according to the safeguards offered by the provider (Data Privacy Framework or standard contractual clauses)on the provider's website
Google (Google Fonts)fonts loaded on every pageIP address and browser of every visitorclients and The Tech NationUnited States and worldwide networkData Privacy Framework or standard contractual clauses, according to the safeguards offered by the provideron the provider's website
Google (embedded Google Calendar)appointment booking, displayed inside the page on clickIP address, Google cookies, information entered to bookThe Tech NationUnited States and worldwide networkData Privacy Framework or standard contractual clauses, according to the safeguards offered by the provideron the provider's website
YouTube (Google)video embedded in the Yeti space sales kit, through the youtube-nocookie.com domainviewer's IP address and browserThe Tech NationUnited States and worldwide networkData Privacy Framework or standard contractual clauses, according to the safeguards offered by the provideron the provider's website
Vimeovideo embedded in the Yeti space sales kitviewer's IP address and browserThe Tech NationUnited StatesData Privacy Framework or standard contractual clauses, according to the safeguards offered by the provideron the provider's website
OpenTimestamps (public timestamping servers)proof of date for certificates by anchoring in the Bitcoin blockchaina salted cryptographic fingerprint, with no readable dataclientspublic serversnot applicable: no personal data sentnot applicable
Blockstream.infochecking the Bitcoin block of the anchorblock number onlyclientspublic servernot applicable: no personal data sentnot applicable

What is not on this list

  • The Climb uses no audience measurement tool, no error tracking tool and no advertising service. The application calls no AI model.
  • The the-tech-nation.com website receives plan requests sent from the AI Maturity Path. It is another website of The Tech Nation, not a provider.
  • AI assistants connected through MCP are chosen by the person who connects them (a Yeti or a member of The Tech Nation team). Our clients' team members have no MCP access. See the privacy policy.
  • The LinkedIn button on a certificate is a plain link: nothing is sent to LinkedIn without your click.

Changes

Any addition or replacement of a provider that processes data of our clients' team members is announced to clients by email at least 30 days in advance, as set out in the data processing agreement. The version date at the top of this page shows the latest update.