Sub-processors
Last updated 2026-05-22
We use the following sub-processors to deliver the undocsend service. We update this list as our stack evolves and notify Operators at least 15 days before adding a new sub-processor. Operators who object to a new sub-processor may terminate the Service in accordance with our DPA.
| Vendor | Purpose | Data shared | Region | DPA |
|---|---|---|---|---|
| Supabase | Application database and authentication | All app data, user accounts, session tokens | US | Supabase DPA |
| Cloudflare R2 | Document storage | Uploaded documents, generated previews and thumbnails | Global | Cloudflare DPA |
| Vercel | Application hosting | Application traffic, request logs | Global | Vercel DPA |
| Resend | Transactional email delivery | Recipient email addresses and email content (magic links, notifications) | US | Resend DPA |
| Anthropic | AI processing — default provider (optional via BYOK) | Document content sent for summarization and Q&A | US | Anthropic Privacy Policy |
| OpenAI | AI processing — default provider (optional via BYOK) | Document content sent for OCR and summarization | US | OpenAI Data Processing Addendum |
| PostHog | Product analytics and feature flags | Page views, custom events, IP-derived geolocation | US (EU region available) | PostHog DPA |
| Sentry | Error monitoring | Stack traces, browser metadata, redacted request context | US | Sentry DPA |
| Easy (itseasy.co) | Billing and payments | Account email, billing details, payment metadata | US | Internal (same company) |
AI sub-processors and BYOK
Anthropic and OpenAI are the default AI providers used when an Operator enables AI features. Operators may bypass these defaults by configuring Bring Your Own Key (BYOK) for a supported provider; AI requests for that workspace then route directly to the Operator’s provider account and are no longer routed through undocsend’s default AI sub-processors.
Notifications
When we add a new sub-processor, we publish the update here and email Operators at least 15 days before the new sub-processor begins processing data. To receive these notifications, ensure your workspace billing-contact email is up to date.