Sub-processors
Every third party that touches your data, and exactly what each one sees.
Last updated
These are the services we rely on to run ScopeDiff. Each one processes some data on our behalf. This is the complete list — there is nothing else.
| Service | What it does | What it sees | Where |
|---|---|---|---|
| Vercel | Application hosting and serverless compute | All request traffic in transit; server logs (IP address, request path, timing) | United States |
| Supabase | Database, authentication, and file storage | Account email, scope records, project and client names, uploaded logos, encrypted GitHub token | United States |
| Anthropic | AI parsing of agreements and drafting of status updates | Text of an uploaded agreement during a parse; your notes and repository activity during upkeep | United States |
| Stripe | Subscription payments and billing management | Billing email, payment method (held by Stripe, never by us), subscription status | United States |
| GitHub | Optional sign-in, and reading repository activity you connect | GitHub username; pull request titles and descriptions, commit subjects and author names from repositories you connect | United States |
| Resend | Transactional email (sign-in links, billing confirmations) | Account email address and the contents of those messages | United States |
Worth calling out
- Anthropic does not train on API data. Text sent for parsing is not used to train models. Anthropic may retain inputs for a limited period for safety and abuse monitoring, under its own terms.
- Stripe holds card details; we never do.Payment information is entered on Stripe’s hosted checkout and never reaches our servers.
- Your uploaded agreement is not stored by anyone in this list except in transit through Vercel and Anthropic to be read. See the Privacy Policy for exactly what that means.
- No analytics or advertising provider appears here because we don’t use one.
Changes
Before we add a sub-processor, we will update this page at least 30 days in advance. If you want to be emailed when that happens, write to hello@scopediff.comand we’ll add you to the list.
Related: Privacy Policy · Security