Legal document
Processors
⚠ Structural draft. The text is written for ACM and is being finalised together with a lawyer. Fields marked “to be completed” / “to be confirmed” will be filled in with the actual data.
2sections26.10.2026last revised
1. Who the processors are
- Processors are the partners to whom we pass personal data only so that they can help us run the Service, following our instructions.
- Each one has access only to the data it needs for its task.
- With each one we have a contract requiring it to protect the data at a level at least equal to ours.
- For partners in countries without a recognised level of protection, we use standard contractual clauses.
- When we add a new processor, we update the list and the date at the top and notify the clients who have signed the Processing agreement.
2. List of processors
| Name | Purpose | Location | Status |
|---|---|---|---|
| Inovare-Prim SRL | server hosting: running acmframework.com, the ACM platforms and the database (Supabase, hosted by ACM on this server) | Republic of Moldova | in use |
| Cloudflare | domain name, page delivery and forwarding of the ajutor@acmframework.com address | global | in use |
| Resend | sending emails: invitations, confirmations, password resets, news | to be confirmed: region | in use |
| Anthropic | AI models (Claude) for suggestions and coding | USA | in use |
| Google (Analytics 4) | measuring visits to the site, only with consent for Analytics | USA / EU | in use |
| Google (“Sign in with Google”) | signing in with your Google account, only if you choose it | USA / EU | in use |
| Meta (Pixel) | measuring ACM ads, only with consent for Advertising | USA / Ireland | in use |
| Microsoft (Clarity) | session recordings and click maps on the site, only with consent for Analytics | USA / EU | in use |
| OpenAI | AEO queries: how a brand appears in ChatGPT answers | USA | in use |
| Perplexity | AEO queries: how a brand appears in Perplexity answers | USA | in use |
| Google (Gemini) | AEO queries: how a brand appears in Gemini answers | USA | in use |
| Backblaze (B2) | storing the server's encrypted backups off the server; Backblaze cannot read the contents of the backups | EU (Germany) | in use |
| Have I Been Pwned (Pwned Passwords) | checking for leaked passwords, at sign-up and when the password is changed: only the first 5 characters of the SHA-1 hash are sent, never the password | global | in use |