DocuClipper logo

Sub-processors

DocuClipper engages the third-party sub-processors below to help deliver our services. All sub-processors are bound by written agreements that include confidentiality, security, and (where applicable) GDPR Article 28 obligations and Standard Contractual Clauses.

Last updated: May 1, 2026

Sub-processorPurposeData categoriesLocation
Amazon Web Services (AWS)Cloud hosting, document storage (S3), database, OCR (Textract), email delivery (SES)Account data, uploaded documents, extracted data, application logs, transactional email contentUnited States (us-east-1)
Stripe, Inc.Payment processing and subscription billingBilling contact, email, payment method (tokenized), invoice historyUnited States
Anthropic, PBCLLM-assisted document extraction and classification (Claude API)Document text excerpts and OCR output processed for extractionUnited States
OpenAI, L.L.C.AI-assisted document understanding and product improvement (may include document content sent for code and extraction quality work)Document text excerpts and OCR output processed for extractionUnited States
Google LLC (Cloud Vision, OAuth)OCR processing for select document types; Google Sign-In and Google Drive ingestion (only when user connects)Document images submitted for OCR; OAuth profile and Drive file metadata for connected usersUnited States
Microsoft Azure (Cognitive Services / Vision)OCR processing for select document typesDocument images submitted for OCRUnited States
SendGrid (Twilio)Transactional and lifecycle email deliveryEmail address, name, email content (account, billing, product notifications)United States
Zendesk, Inc.Customer support ticketing and helpdeskEmail address, name, support conversation content, attachments shared by customerUnited States
PostHog, Inc.Product analytics and feature usage telemetryPseudonymous user ID, page views, in-product events, device/browser metadataUnited States (US cloud region)
Sentry (Functional Software, Inc.)Application error monitoring and crash reportingStack traces, request metadata, user ID associated with error eventsUnited States
Intuit Inc. (QuickBooks Online)Export of extracted data to QuickBooks Online (only when user connects)OAuth tokens and exported transaction data for connected accountsUnited States
Xero LimitedExport of extracted data to Xero (only when user connects)OAuth tokens and exported transaction data for connected accountsNew Zealand / United States
Dropbox, Inc.Document ingestion from Dropbox (only when user connects)OAuth tokens, file metadata and contents the user selects to importUnited States
Box, Inc.Document ingestion from Box (only when user connects)OAuth tokens, file metadata and contents the user selects to importUnited States
Microsoft Corporation (OneDrive / Graph)Document ingestion from OneDrive (only when user connects)OAuth tokens, file metadata and contents the user selects to importUnited States

International transfers

Where personal data of EU/UK/Swiss data subjects is transferred to a sub-processor outside the EEA, UK, or Switzerland, DocuClipper relies on the European Commission’s Standard Contractual Clauses (Module Two and Module Three, as applicable) and, where required, the UK International Data Transfer Addendum.

Notification of changes

We will update this page when a new sub-processor is engaged or when an existing one is replaced. Customers on Business and Enterprise plans can subscribe to email notifications of sub-processor changes by emailing support@docuclipper.com with the subject line “Subscribe: Sub-processor updates.” We aim to provide at least 30 days’ notice before a new sub-processor begins processing customer personal data, during which a customer may object in accordance with the Data Processing Addendum.

Related documents

For a Data Processing Addendum (DPA), email support@docuclipper.com and we will send the latest version.

Questions

For questions about this list or our sub-processor management program, contact support@docuclipper.com.