Subprocessors, transparently.
The current list of third parties that may process customer data on our behalf. We notify all customers at least 30 days before adding or replacing a subprocessor.
Last updated · October 5, 2026
Infrastructure
3 subprocessors
VendorPurposeRegion
- Amazon Web ServicesFile storage for uploaded and remediated documents (Amazon S3).US
- VercelHosting for the marketing site, sign-in, dashboard and API. Requests to AI models are routed through its AI Gateway.US
- RailwayManaged Postgres for application data, and the workers that process documents and scan websites.US
Operational
1 subprocessor
VendorPurposeRegion
- ResendTransactional email delivery (sign-in codes, password resets, workspace invitations).US
AI / ML
2 subprocessors
VendorPurposeRegion
- AnthropicLanguage-model inference for alt text, remediation review and the in-app assistant.US
- ModalGPU hosting for the OCR and layout model we run ourselves. It receives document pages during processing.Varies
Change notifications
30 days' notice, always.
We email every customer at least 30 days before adding or replacing a subprocessor. Subscribe below to receive notifications even if you're not yet a customer.
Need a specific subprocessor flag?
We support contractual restrictions on AI subprocessors for districts that require it. Talk to us.