Subprocessors
Last updated: 2026-07-05
We use the following subprocessors to run Inkproof. Data location reflects where each provider processes the relevant data for our configuration.
| Provider | Purpose | Data touched | Location | Safeguards |
|---|---|---|---|---|
| Anthropic | AI grading & study suggestions | Transcripts of your uploads (excerpts) | USA | DPA + SCCs; no training on API data |
| OpenAI | Embeddings for search | Transcript chunks | USA | DPA + SCCs; no training on API data |
| Mathpix | OCR of PDFs & handwriting | Uploaded documents/photos | USA | DPA + SCCs; improve_mathpix=false — never used for model training |
| Stripe | Payments & invoicing | Email, payment details (held by Stripe) | USA/EU | DPA + SCCs; PCI-DSS |
| Resend | Outbound email (login links, notifications) | Email address, notification content | USA/EU | DPA + SCCs |
| Postmark | Inbound email (send-to-project) | Emails you send to your project address | USA | DPA + SCCs |
| Neon | Postgres database hosting | All application data | EU (aws-eu-central-1) | DPA |
| Fly.io | Application hosting | All application traffic | EU (fra) | DPA + SCCs |
| Cloudflare | Object storage (R2) & network | Uploaded files, generated PDFs | EU jurisdiction bucket | DPA + SCCs |
We will update this page before adding or replacing a subprocessor. Registered users are notified of changes by email.