Subprocessors
Effective October 24, 2026
These providers process data on EstoppelBot’s behalf to deliver the service. Each is bound by confidentiality and data-protection terms. We update this page before adding a new subprocessor.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database, authentication and encrypted secret storage | All workspace content and account data | United States (us-east-1) |
| Vercel | Application hosting; cookieless analytics on public marketing pages only | Request data in transit; no workspace content in analytics | United States and global edge network |
| Resend | Email delivery (tenant requests and reminders, invitations, notifications and daily digests) | Recipient address and message content | United States |
| Anthropic | AI extraction, response review and certificate drafting (default provider; a workspace that connects its own AI provider sends AI requests to that provider instead, under its own agreement) | Only the document or request being processed (for document reading, the full PDF) | United States |
| Sign-in with Google, for users who choose it | Name and email address of the signing-in user | United States |
Destinations you choose
These are not EstoppelBot subprocessors, but workspace data reaches them when your workspace turns them on:
- Your own AI provider (OpenAI, Azure OpenAI, Google Gemini, AWS Bedrock or an OpenAI-compatible service), if an owner connects your firm’s key. AI requests then go there instead of Anthropic, under your agreement with that provider.
- AI apps your members connect (for example Claude or ChatGPT), which can read the workspace through our API and, where the workspace and the member allow it, prepare work that a member approves. Owners and admins can turn this off.
- Digest recipients an admin adds, who receive a daily summary of deadlines and tenant status by email.
Email is sent through Resend; EstoppelBot does not connect to Microsoft 365, Outlook mail or Teams. SMS reminders are built but switched off; Twilio would be added here before they are turned on.