Sub-Processors List

Purpose

Processes all payment transactions, manages subscription billing, handles refunds, and stores payment method information securely.

Data Processed

• • Email address
• • Name
• • Billing address
• • Payment method details (card, bank account)
• • Transaction history

Data Location

United States (primary)
Multiple global regions for redundancy

Certifications

PCI DSS Level 1, SOC 2 Type II, ISO 27001, GDPR-compliant

Purpose

Hosts our PostgreSQL database, manages user authentication, stores PDF templates and generated documents in secure private storage buckets.

Data Processed

• • All account information
• • User authentication tokens
• • PDF templates and mappings
• • Form data and presets
• • Generated documents
• • Batch processing metadata

Data Location

United States (us-east-1)
AWS infrastructure with encryption at rest

Security Features

Row Level Security (RLS), encrypted backups, private storage buckets, signed URLs with expiration

Purpose

Caches frequently accessed data for performance, manages background job queues for batch processing, stores temporary session data.

Data Processed

• • Cached template data (temporary)
• • Session tokens
• • Job queue metadata
• • Processing status information

Data Location

United States (AWS us-east-1)
Data encrypted in transit and at rest

Data Retention

Temporary only – cached data expires automatically, no long-term storage of user data

Purpose

Hosts our FastAPI backend application that processes PDF forms, handles API requests, and coordinates service operations.

Data Processed

• • API request/response data (in transit)
• • Application logs (temporary)
• • Processing metadata
• • No persistent data storage

Data Location

United States (Oregon)
All data encrypted in transit via HTTPS

Security Features

Automatic TLS/SSL, DDoS protection, isolated containers, SOC 2 Type II certified

Purpose

Hosts our Django-based frontend application, serves web pages, manages user sessions, and handles static assets.

Data Processed

• • Web request logs (temporary)
• • Session cookies
• • Static file delivery
• • No user data storage

Data Location

United Kingdom (primary)
United States (backup)

Security Features

HTTPS/TLS encryption, isolated environments, regular security updates

Purpose

Provides single sign-on (SSO) authentication option for users who prefer to log in with their Google account instead of creating a password.

Data Processed

• • Email address
• • Full name
• • Profile picture (optional)
• • OAuth tokens (for authentication only)

User Control

Completely optional – users can choose email/password authentication instead. Only used if you explicitly click "Sign in with Google".

Data Location

Global (Google infrastructure)
GDPR and Privacy Shield certified