Subprocessors
Who can touch customer data, and how Documents processing is kept on our own servers.
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| InterServer | Hosting: runs the application server, database and file storage | All data, encrypted at rest (files UFENC1; extracted text and fields encrypted) | US |
| Flowroute | Telephony carrier: phone numbers and transmission over the phone network | Transmission content in transit only; nothing from Documents | US |
| SIP.US | Telephony carrier: SIP trunking | Transmission content in transit only; nothing from Documents | US |
| Our own mail server | Account and notification email, run on our own server. Not a third party | No document content unless the account opts in | Our servers (US) |
| RunPod (only when Document AI is turned on) | GPU inference for Document AI: page layout, tables, fields, summaries and questions | Page images and document text, processed in memory per request and not retained by us there. BAA requested, pending: do not enable for PHI until signed | US |
| PayPal | Payments | Billing contact and payment data only. No PHI, no documents | US |
Documents processing
- OCR, classification, field extraction, summaries and agents run on our application server. No third-party AI or OCR service is used.
- Files and extracted text, fields and summaries are encrypted at rest.
- An optional language model can be turned on only against a self-hosted endpoint on a private network. It's off by default.
- Document content isn't included in logs, emails or webhooks unless the account turns that on.
- Every view, download, edit, analysis and deletion is recorded in an access log.