Processing categories
Depending on the functions a customer uses, third-party processing may support identity and account access; payment, subscriptions, tax, and billing; project email and attachments; file storage, previews, and authorized delivery; AI-assisted processing; application and database hosting; security monitoring; diagnostics; and customer support.
Processing boundaries
Third-party services may process account details, contact information, project communications, files, instructions, generated or processed results, transaction records, and technical activity only as needed for the applicable service function. Actual processing depends on the features requested or enabled for the workspace.
Provider contracts, access controls, and other available safeguards are used according to the service and transfer context. This summary does not disclose internal hostnames, network topology, credentials, software versions, or infrastructure configuration.
Named list and changes
A current named provider and subprocessor list is available to customers and prospective business customers with a legitimate privacy, legal, security, or procurement need. Request it through [email protected]. We may verify the requester's identity, authority, and relationship to the relevant organization before providing non-public information.
Where an applicable contract or DPA provides general authorization for subprocessors, material additions or replacements are handled through the notice and objection process stated in that agreement.