A sub-processor is a company that may handle your data because we use it to run the service. This list is current as of the review date at the foot of this page.
| Company | What it does for us | What it can see | Where |
|---|---|---|---|
| Hostinger International | Hosts the private server the application and database run on | Operates the infrastructure. Application data sits inside an encrypted filesystem on the host | United States |
| Cloudflare, Inc. | Terminates TLS and carries traffic between your browser and our server | Traffic in transit, and connection metadata including IP addresses | Global edge network |
| Resend (Plus Five Five, Inc.) | Delivers transactional email — invitations, reminders, completed copies | Recipient name and email address, the message, and any attached executed document | United States |
Being straight about this because a reader of a config file would otherwise wonder. A Gmail SMTP account is configured as a fallback mail route and is used only if Resend is unavailable. Twilio is present in the codebase for SMS delivery but is switched off — the SMS provider is set to local logging, and no message is sent to Twilio. If we ever turn it on, it will appear in the table above before it carries a single message.
We will post a change here before a new sub-processor begins handling customer data, and email account owners who ask to be told. To be added to that list, write to [email protected] with "SUBPROCESSOR NOTICE" in the subject.