Subprocessors
Current vendor and service-provider disclosure.
Effective date: 2026-03-23. This page lists the current subprocessor baseline and customer-directed service providers used in the Docsift operating model.
Supabase
Purpose
Authentication, Postgres database, and private object storage.
Data involved
Account data, workflow data, attachments, audit logs, and related service metadata.
Notes
Core infrastructure provider for the current hosted product architecture.
Vercel
Purpose
Application hosting, delivery, and runtime infrastructure.
Data involved
Application requests, routing metadata, and content required to serve the hosted service.
Notes
Public site and hosted application delivery baseline.
Resend
Purpose
Transactional email delivery when email notifications are enabled.
Data involved
Recipient email address, delivery metadata, and message content required for invites, recovery, or warning notifications.
Notes
Used only when email delivery is configured.
Customer-configured AI providers
Purpose
Optional extraction and AI-related processing requested by the customer.
Data involved
Relevant document content and prompt or response data needed to complete the requested workflow action.
Notes
Used only when a customer enables AI and configures a provider such as OpenAI, Anthropic, or Google with its own credentials.
Customer-directed integrations
Purpose
Exports and synchronization to downstream systems.
Data involved
Approved record data required to complete customer-directed exports to tools such as Google Sheets or NetSuite.
Notes
Activated only when a customer configures the integration.