Updated quarterly. Customers notified 30 days before adding new sub-processors that handle customer data.
| Sub-processor | Purpose | Location |
|---|---|---|
| Anthropic | LLM provider (synthesis) | US |
| Cloudflare | CDN, R2 storage, DNS, WAF | US/distributed |
| Vultr | Control plane hosting | US |
| Stripe | Billing, payment processing | US |
| Clerk / Auth0 | Customer authentication | US |
| Hunter | Email/contact data | France/EU |
| SecurityTrails | Passive DNS | US |
| HaveIBeenPwned | Breach intelligence | Australia |
| DeHashed | Breach intelligence | US |
| GreyNoise | Threat intelligence | US |
| VirusTotal | Threat intelligence | Spain/EU |
| URLscan | URL scanning | Latvia/EU |
| OpenSanctions | Sanctions data | UK |
Last updated: 2026-05-02. Email [email protected] for the full list.