Subprocessors and Other Providers
Last updated:
A Customer Content subprocessor is a vendor that Docabra engages while acting as your processor. It receives personal data from uploaded documents or extracted tables and processes that data on our behalf. Account-data providers do not belong to that DPA chain when they only process data that Docabra controls, such as an account email address or billing record.
Current Customer Content subprocessors
| Vendor | Purpose | Location |
|---|---|---|
| OpenAI | AI processing | United States |
| Anthropic | AI processing | United States |
| AI processing | United States |
Our application and database are hosted with a cloud infrastructure provider; this page will name that provider before launch.
Customers under a Data Processing Agreement can find the categories of data each sub-processor handles in Exhibit B of that agreement.
Other account-data providers
| Provider | Data-protection role | Purpose and data |
|---|---|---|
| Resend | Processor acting for Docabra | Sends transactional email using the account email address and the content of sign-in, reset, and notice messages. |
| Stripe and Sold through Link, LLC | Processor for instructed payment operations; independent controller for specified purposes | Processes identity, device, payment, tax, and transaction data for payment operations, financial partners, fraud and loss prevention, legal and financial compliance, supported indirect tax administration, disputes, customer support, and service improvement. Payment card details are collected by Stripe directly. |
Stripe explains its roles in its DPA, Privacy Policy, and Privacy Center. Sold through Link, LLC provides the Managed Payments service and acts as merchant of record. Docabra remains the seller of the Service.
Changes to this list
We will update this page at least 30 days before adding or replacing a Customer Content subprocessor. To be notified of changes by email, send a message to [email protected] with the subject "Subscribe to subprocessor updates".
If you have a Data Processing Agreement with us, you may object in writing to a new subprocessor within 30 days of the update, on reasonable data protection grounds. We will work with you to resolve the objection; if we cannot, you may terminate the affected Service, and that termination is your exclusive remedy for the change.