Sub-processors
Version 1.0 · Last updated: 26 October 2026
| Sub-processor | Location | Purpose | Data processed | Date added |
|---|---|---|---|---|
| AnthropicAnthropic Ireland, Limited | Ireland (contracting entity). Data stored in the United States; model processing may run in the United States, Europe, Asia or Australia unless a regional setting is applied | AI document processing and question answering | Board documents submitted for extraction, and the questions and documents sent with each Ask query. | 26 October 2026 |
| SupabaseSupabase Pte. Ltd. | Data hosted in London, United Kingdom (AWS eu-west-2); contracting entity in Singapore | Database and file storage | All Customer Data held by the service: board documents, the record extracted from them, Ask history, and board membership. | 26 October 2026 |
| VercelVercel Inc. | United States; application functions run in London (lhr1) | Application hosting | Customer Data in transit while the application handles each request. | 26 October 2026 |
| ClerkClerk, Inc. | United States | Authentication and identity services | Authorised Users' names, email addresses and sign-in records. No board content. | 26 October 2026 |
Changes
We give customers at least 30 days' notice before appointing a new sub-processor, as set out in clause 8.3 of the Data Processing Agreement. Each addition is listed here with the date notice was given.
No changes since this list was first published.
Note: Resend, an email delivery service, is not a sub-processor. No customer data passes through it, and it is not on this list, which Annex A of the Data Processing Agreement adopts as the authorised sub-processors clause 8.1 limits us to. Engaging it for customer data would be an addition under clause 8.3, with notice given here.
Change log
No previous versions.