Draft for legal review. Not yet in force.Version 2026-11-05

Legal

Subprocessor List

Draft v1, version 2026-11-05. Last updated 9 November 2026. Confirm every entry against providers actually used.

We notify account managers at least 30 days before adding or replacing a subprocessor that processes Customer Content (DPA section 5).

SubprocessorPurposeDataLocation of processingTransfer safeguardStatus
Hetzner Online GmbH (Germany)Hosting of rendering service, storage, backupsCustomer Content, account dataGermany (Nuremberg)EU, none neededIn use
Supabase, Inc.Sign-in and account authentication, including sign-up emailsEmail address, name, password hash[Supabase region]SCCs or the EU-US Data Privacy Framework, as offered in the provider's termsIn use
Email delivery provider, not yet chosenTransactional emailsEmail address, name, email contentTo be listedTo be listedNot in use
Anthropic PBCOptional document cleanup, and preparing sample contentContent of files or pages sent for analysisUnited StatesSCCs or the EU-US Data Privacy Framework, as offered in the provider's terms. The provider's commercial terms prohibit training on customer contentOnly when requested
StripeCard payments, invoicingBilling contact, payment metadataEU and United StatesSCCs or the EU-US Data Privacy Framework, as offered in the provider's termsIn use
Cloudflare, Inc.Website delivery, DNS, DDoS protectionIP addresses, request metadataGlobal edgeSCCs or the EU-US Data Privacy Framework, as offered in the provider's termsIn use
Google LLC (Google Analytics)Website analytics, only after a visitor accepts cookiesTechnical data, usage dataUnited StatesSCCs or the EU-US Data Privacy Framework, as offered in the provider's termsIn use, with consent

Not subprocessors (customer-side): AI assistants the customer connects to its MCP server (e.g. Claude, ChatGPT, Copilot) are chosen and contracted by the customer.

Note on the optional cleanup feature. The API has an opt-in cleanup option that sends document text to an AI model provider (the code calls Anthropic) to repair formatting. It is off by default. The Anthropic row above applies only when this option is used.

Questions: [email protected]