We use the following sub-processors to provide the hosted service. Each processes data only as needed for its function, under a data processing agreement.
| Provider | Function | Data touched | Location |
|---|---|---|---|
| Cloudflare, Inc. | All infrastructure: compute, storage (documents, database), networking | All service data (documents envelope-encrypted at the application layer) | Global; EU jurisdiction storage for EU-region workspaces |
| OpenRouter, Inc. | AI inference routing (chat, summaries, extraction, embeddings) | Document text submitted for the AI features you invoke; no training on your content | United States (routes to model providers below) |
| Google / OpenAI (via OpenRouter) | Underlying AI models (currently Gemini for chat/extraction, OpenAI for embeddings) | Same as OpenRouter, per request | United States |
| Stripe, Inc. | Payment processing for credit top-ups | Billing contact and payment details (we never store card numbers) | United States / EU |
| Google LLC (Sign-In) | Authentication (OIDC) | Email, name, avatar at login | Global |
We will update this page at least 30 days before adding a sub-processor that processes document content. Subscribe to changes by watching the open-source repository, where this page is versioned.