Juridique
Sub-processors
The companies that handle personal information for SafetyDocs, what each one does, the information it receives, and where it's based.
Dernière mise à jour : 3 November 2026
These companies handle personal information so we can run SafetyDocs. We use each one only for what's listed, and we have contracts with them that limit how they can use your information. Location means where the company is based, unless the row says otherwise. They may also use their own suppliers elsewhere.
Our Data Processing Addendum explains how we tell customers about changes. Questions: privacy@safetydocs.app.
Need it held in a particular country? We don't offer a choice of hosting region today. If your organisation needs its information held in a particular country, email support@safetydocs.app and tell us where. It helps us decide what to build next.
Running the product
| Company | What it does | Information | Location |
|---|---|---|---|
| Convex | Main database and backend | Accounts, organisations, documents, jobs, crew, contacts, audit entries | United States (data on AWS, us-east-1) |
| Cloudflare | File storage (R2) | Uploaded files, pictures, stored AI requests and responses | United States (Oceania region preferred) |
| Vercel | Hosts the website and app | All site and app traffic, IP address, approximate country | United States |
| Amazon Web Services | Scans uploaded files for malware and prepares them for conversion | Uploaded files while scanning and converting, and 30 days of logs | Australia (Sydney) |
| WorkOS | Sign-in, sessions, organisation roles | Name, email, mobile, profile picture, memberships | United States |
| Sentry | Error reports | Technical details of errors, which can include an account ID or IP address | United States |
| PostHog | Product analytics | Pages, clicks, how the product is used, linked to your account and organisation when you're signed in | United States |
Payments and messages
| Company | What it does | Information | Location |
|---|---|---|---|
| Autumn | Plans, allowances and usage | A billing ID, name, email, plan and usage | United States |
| Stripe | Takes payments, through Autumn | Name, email, card and payment details | Australia and United States |
| Resend | Product and support email | Email address, name, message content | United States |
| Twilio | Text messages and sign-in codes | Mobile number, message content | United States |
| Customer.io | Marketing and lifecycle email | Email, name, company and details about your business, past purchases, last sign-in, email engagement | United States |
| Calendly | Books demo calls | Name, email, company, phone, number of sites | United States |
| HubSpot | Live chat and our customer records | Chat messages, visits if you allow live chat, and old-store customer records and notes | United States |
| Mux | Plays videos on the site | How a video played, with a visitor ID if you allow analytics, which is linked to your emails if you came from one | United States |
AI features
These only receive your content when someone in your organisation uses AI on a document, or turns on a step that does. Every AI host must keep no copy of what we send, and must not train on it. OpenRouter chooses the host from those that meet this rule, so it's OpenRouter's sub-processor, and it can change without separate notice from us. Requests carry IDs for the organisation and person, not their names. A document's content can include personal information.
| Company | What it does | Information | Location |
|---|---|---|---|
| OpenRouter | Passes requests to the AI model | The file or text sent, and IDs | United States |
| Anthropic | Claude converts files into documents | The file or text sent | United States |
| TypeSafe AI, Inc. | Its Jev model sorts files and pictures before converting | The file's text and pictures | United States |
| Hosts of DeepSeek's open model | Translate documents. OpenRouter chooses a host that keeps no data. We tell it never to use DeepSeek's own service | The text sent | Depends on the host |
Companies that decide for themselves
These companies aren't our sub-processors. If you allow advertising cookies, they receive information directly and use it under their own privacy policies. See our Cookie Policy.