Sub-processor List
This pack contains 18 working-draft legal documents. None of them have been reviewed by Texas counsel or counsel licensed in any other jurisdiction. They are a starting point for a real attorney engagement, not a finished publication. Brackets [highlight] indicate custom options to finalize.
The following sub-processors process Personal Data on behalf of SiteFlows in connection with operating the Service. We engage each sub-processor under contract terms that are at least as protective as our Data Processing Addendum.
| Provider | Service | Data Category | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing & Stripe Connect (escrow + payout) | Identity, payment, payout | USA |
| Amazon Web Services, Inc. | Cloud hosting (us-east-1, us-west-2) | All Service data (encrypted) | USA |
| Postmark | Transactional email delivery | Email, name | USA |
| Twilio, Inc. | SMS & verification routing pipelines | Phone number, message body | USA |
| PostHog Inc. | Product analytics (consent-gated) | Pseudonymous event data, IP | USA |
| Vercel Inc. | Web hosting + analytics (consent-gated) | Web traffic logs, IP | USA |
| Anthropic, PBC | AI-assisted dispute analysis & summary generation | Dispute statements, anonymized job metadata | USA |
| OpenAI, Inc. | AI-assisted photo verification (vision API) | Photos with GPS+timestamp watermark | USA |
| Clerk, Inc. | Identity & authentication | Email, name, sign-in metadata | USA |
| Apple Inc. | Sign in with Apple | Email (or relay), name | USA |
| Google LLC | Sign in with Google | Email, name | USA |
Payment processing & Stripe Connect (escrow + payout)
Identity, payment, payout
Cloud hosting (us-east-1, us-west-2)
All Service data (encrypted)
Transactional email delivery
Email, name
SMS & verification routing pipelines
Phone number, message body
Product analytics (consent-gated)
Pseudonymous event data, IP
Web hosting + analytics (consent-gated)
Web traffic logs, IP
AI-assisted dispute analysis & summary generation
Dispute statements, anonymized job metadata
AI-assisted photo verification (vision API)
Photos with GPS+timestamp watermark
Identity & authentication
Email, name, sign-in metadata
Sign in with Apple
Email (or relay), name
Sign in with Google
Email, name
1. Current Sub-processors
Operators on the Professional and Business tiers will be notified by email at least 30 days before a new sub-processor begins processing Personal Data. To subscribe to these notifications, contact at privacy@siteflows.ai privacy@siteflows.ai
2. Change Notifications
Anthropic and OpenAI process limited Personal Data when AI features are invoked. Per our agreements with both providers, prompt content is not used to train their models. Photo verification with OpenAI processes photos with GPS+timestamp watermarks; raw GPS coordinates are not sent. Dispute analysis with Anthropic processes the text of dispute statements with personally identifying names redacted before transmission.