Subprocessors
Last updated: April 28, 2026
Third-party vendors we use to deliver Contract Offramp. Each processor is bound by a data-processing agreement and confidentiality obligations. We list them here so you can understand exactly where your data flows before you upload.
| Vendor | Purpose | Data shared | Region |
|---|---|---|---|
| Anthropic (Claude) | LLM inference (classification, rubric, aggregation) | Extracted text + prompt context | US |
| OpenAI | Embeddings API for retrieval when `EMBEDDINGS_PROVIDER=openai` | Short text snippets | US |
| Voyage AI | Embeddings API for retrieval when `EMBEDDINGS_PROVIDER=voyage` | Short text snippets | US |
| AWS Textract | OCR for scanned PDFs (fallback path) | Uploaded document bytes | US |
| AWS S3 / Cloudflare R2 | Object storage (uploads + letter renders) | Uploaded document bytes, rendered letters | US |
| Neon / Supabase | Managed Postgres + pgvector | Metadata, extracted text, findings, email | US / EU |
| Stripe | Payments processing and receipts | Email, billing country, card last-4, transaction amounts | US |
| Resend | Transactional email delivery | Email address + message body | US |
| Inngest | Durable background jobs and cron | Event payloads (analysis ids, timing data) | US |
| Upstash | Rate limiting (Redis) | IP address + email hash, counters only | Global |
| Sentry | Error monitoring | Stack traces + redacted event metadata (no document content) | US / EU |
| Vercel | Hosting, CDN, edge routing | HTTP requests and responses | Global |
Only one embeddings provider is active per deployment (EMBEDDINGS_PROVIDER: openai or voyage in production).
Related: Privacy Policy · Terms of Service · Disclaimers · DMCA