Current subprocessors
| Vendor | Category | Purpose | Data shared | Region |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Infrastructure | Cloud infrastructure and hosting | All customer data (encrypted) | United States / EU |
| Supabase | Infrastructure | Database and authentication services | Account data, application data | United States |
| Cloudflare | Security | CDN, DDoS protection, and DNS | IP addresses, request metadata | Global (edge nodes) |
| Stripe | Payments | Payment processing | Billing information, payment cards | United States |
| Postmark | Communications | Transactional email delivery | Email addresses, notification content | United States |
| Intercom | Support | Customer support and messaging | Contact info, support conversations | United States |
| OpenAI | AI Processing | AI/LLM processing for document analysis | Document content (for processing only) | United States |
| Anthropic | AI Processing | AI/LLM processing (alternate provider) | Document content (for processing only) | United States |
Last reviewed: December 2024. This list is updated as subprocessors change.
Subprocessor change notifications
Enterprise customers with a Data Processing Agreement (DPA) receive advance notice of any new subprocessors, with the ability to object within the timeframe specified in their agreement.
Coming soon: Email notifications for subprocessor changes
Data protection standards
-
All subprocessors sign data protection agreements
-
We verify SOC 2 or equivalent certifications where available
-
Regular security assessments of critical subprocessors
-
EU-US Data Privacy Framework compliance where applicable
-
Contractual commitments from AI providers not to train on customer data