Last updated September 1, 2026
These are the third parties that process customer data on our behalf. We update this page before a new sub-processor starts processing, which is the notice promised in section 5 of the Data Processing Addendum. This page is Annex III to that addendum, so what is listed here is what we are contractually permitted to use — nothing else receives your data.
Always involved
The infrastructure the service runs on, plus payment and sign-in. Every account reaches these.
| Provider | Purpose | Data received | Location |
|---|---|---|---|
| Cloudflare, Inc. | Object storage for uploaded files, thumbnails and export archives | Uploaded document bytes, generated thumbnails, export archives | Global, on Cloudflare's network |
| Cloudflare, Inc. | Edge network: TLS termination, routing to our origin, and DDoS protection | All traffic to the service, including request contents in transit | Global, on Cloudflare's network |
| Cloudflare, Inc. | Transactional email delivery: sending invitations to the people invited | Recipient email address, subject and message body, including the invitation link | Global, on Cloudflare's network |
| Stripe, Inc. | Payment processing and subscription billing | Billing email, organization name, and the card details you give Stripe directly | United States, with global processing |
| Google LLC | Sign in with Google, for users who choose it rather than a password | Email address, display name, profile picture URL, Google account identifier | United States, with global processing |
Involved only when selected
Model and OCR providers. Which of these receives your data depends on the embedding model, language model and extraction mode selected for your organization or workspace — so this is a list of what we can reach, not what every account does. A workspace restricted to zero-data-retention models will not reach a provider that does not offer them.
| Provider | Purpose | Data received | Location |
|---|---|---|---|
| Google LLC (Cloud Vision) | Optical character recognition on scanned documents | Page images rendered from uploaded documents | United States |
| OpenRouter, Inc. | Routing requests to language and embedding models, and the model catalog | Document text and questions sent for answering or targeted extraction | United States |
| Anthropic, PBC | Language model answering and AI-guided extraction | Document text and questions, plus rendered page images | United States |
| OpenAI, L.L.C. | Text embeddings and language model answering | Document text and questions | United States |
| Google LLC (Gemini) | Text embeddings and language model answering | Document text and questions | United States, with global processing |
| Voyage AI | Text embeddings | Document text | United States |
Being told when this changes, and objecting
Write to [email protected] and we will notify you before a sub-processor is added, rather than leaving you to watch this page. Customers under the Data Processing Addendum then have 30 days from the addition to object on reasonable data-protection grounds; if we cannot resolve an objection you may terminate the affected part of the service and be refunded the prepaid fees for it.