Subprocessors
The third-party companies that may process your Customer Data when you use Docsumo, what each one does and where.
Who may process your data, and where.
Grouped by what each company does for Docsumo. Locations are the places each one may process Customer Data.
| Subprocessor | Service | Locations | Legal address |
|---|---|---|---|
Cloud hosting and dataWhere Docsumo runs and your data is stored, in the region you choose. | |||
| Amazon Web Services, Inc.AWS | Cloud hosting, storage and AI services |
| 410 Terry Avenue North, Seattle, WA 98109, USA |
| Google LLCGoogle Cloud Platform | Cloud hosting, storage and AI services |
| 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA |
| MongoDB, Inc.MongoDB Atlas | Database hosting |
| 1633 Broadway, 38th Floor, New York, NY 10019, USA |
AI modelsModel APIs that help read your documents. Customer Data is not used to train shared or third-party models. | |||
| Anthropic, PBCAnthropic | AI model API |
| 500 Howard Street, San Francisco, CA 94105, USA |
| OpenAI OpCo, LLCOpenAI | AI model API |
| 1455 3rd Street, San Francisco, CA 94158, USA |
Network and securityContent delivery, DNS and protection for the Docsumo app and websites. | |||
| Cloudflare, Inc. | CDN, DNS and network security |
| 101 Townsend Street, San Francisco, CA 94107, USA |
MonitoringError and performance reports that help us keep the app running. | |||
| Functional Software, Inc.Sentry | Error and performance monitoring |
| 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA |
Vetted first, bound by contract, reviewed.
Checked before they start
We carry out due diligence on a provider's security and compliance before it processes any Customer Data.
Bound by contract
Each is bound by confidentiality and data protection terms consistent with GDPR, carrying the obligations of our DPA.
Reviewed over time
We evaluate providers periodically and keep safeguards in place whenever personal data is shared with them.
How changes to this list work.
- 01
Notice as agreed
Customers whose DPA includes notice of new subprocessors hear from us before one starts processing their Customer Data.
- 02
Time to object
You can object on reasonable data protection grounds, as your DPA sets out, and we'll work through it with you.
- 03
This page updates
The list and the date at the top change when a subprocessor is added or replaced.
Get notified of changes
Email privacy@docsumo.com to subscribe, and we'll email you when the list changes. Questions about a subprocessor go to the same address.
Subscribe by email →Questions about subprocessors
What is a subprocessor?
A subprocessor is a third-party data processor that Docsumo engages, which has or may have access to service data, including any personal information in it. The cloud providers that host Docsumo are one example.
Does Docsumo send documents to OpenAI or Anthropic?
Docsumo uses AI model APIs from Anthropic and OpenAI in its model waterfall, and your documents are not used to train shared or third-party models. Both process data in the USA and the EU and, like every subprocessor, are bound by confidentiality and data protection terms consistent with GDPR. See Security for how AI is used.
Where is my data hosted?
You choose the region: the US (N. Virginia or Ohio), the EU (Frankfurt), the UK (London), India (Mumbai), Australia (Sydney) or Singapore. The locations in the list above show where each subprocessor may process Customer Data.
How do I get Docsumo's DPA?
Ask your account team or email privacy@docsumo.com. A Data Processing Agreement is available, and a Business Associate Agreement for health information. The DPA names this page as the current list of subprocessors.