Subprocessors

Authentication and managed Postgres in the selected deployment region. Processes account, membership, device, ciphertext, and operational metadata.

Runs the API and durable worker processes. Processes encrypted requests and operational logs with request bodies and cryptographic fields redacted.

Hosts the public website and browser dashboard. Processes browser requests, account-session cookies, and dashboard assets.

Provides website and hosted-product analytics. Processes page paths, pseudonymous account identifiers, and browser metadata. Query strings, email addresses, autocapture, and session recording are disabled.

Provides checkout, subscription billing, invoices, and customer billing portal. Docmancer does not receive complete payment-card details.

Delivers transactional account and subscription emails. Processes recipient addresses, sender and reply addresses, and the content of those operational messages.