Draft of October 15, 2026. This page is a draft: it is not yet in force, and the parts marked to confirm are still open.
These companies process information for us. None of them receives a client’s documents in readable form outside the review itself, and none receives a saved report that it can read.
| Company | What it does for us | What it handles | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, storage, sign-in, email from the app, and the AI model (Amazon Bedrock) | Encrypted files during a review; text with identifiers removed, for the AI step; encrypted saved reports; account information | Canada; the AI step in the United States or Canada |
| Stripe | Payments, invoices, and sales tax | The firm, its billing contact, address, tax number, plan, and counts of reviews. Nothing about a client | [TO CONFIRM: where Stripe processes it] |
| Microsoft | Our support mailboxes (Microsoft 365) | Emails you send us | [TO CONFIRM: the region of the mail tenant] |
| Telegram | Tells us on our phones when a firm signs up | The firm’s name, and its owner’s name, email, mobile number, and licence number. Nothing about a client | [TO CONFIRM: where Telegram processes it] |
| WhatsApp (Meta) | Messages you choose to send us on WhatsApp | What you write to us there, and your number | [TO CONFIRM: where WhatsApp processes it] |
A hosted status page will be added when the service opens. It will handle only the email addresses of people who subscribe to updates.
We will update this page before a new sub-processor starts to handle information for us.