StudioStudio:Blueprint uses the following third-party sub-processors to operate the platform. We will provide at least 30 days prior notice of any addition or substitution by updating this page and notifying registered users by email.
| Sub-processor | Company | Processing activity | Region | Transfer mechanism |
|---|---|---|---|---|
| Cloudflare R2 | Cloudflare Inc (US) | Object storage for uploaded document content during extraction; Cockpit and public site hosting via Cloudflare Pages and Workers | London, UK (LHR1) for R2 storage; global CDN for Pages | UK IDTA / SCCs |
| Vercel | Vercel Inc (US) | Serverless compute for the Studio:Blueprint API | United States (nearest available region) | SCCs |
| Anthropic via OpenRouter | Anthropic PBC (US) via OpenRouter Inc (US) | AI language model processing of extracted document text for finding extraction, analysis, and synthesis. Anthropic does not use API inputs for model training. | United States | SCCs |
| Upstash | Upstash Inc (US) | Redis key-value store for firm data, client records, engagement data, and evidence findings | European Union | SCCs |
| Stripe | Stripe Inc (US) | Payment processing and subscription management | United States and European Union | SCCs / UK IDTA |
| Resend | Resend Inc (US) | Transactional email delivery for magic links, diagnostic result emails, and product notifications. Delivery logs retained for 30 days. | United States | SCCs |
| Linear | Linear Orbit Inc (US) | Bug report and issue tracking. Receives bug report content submitted by users including technical context. Does not receive client personal data. | United States | SCCs |
Changes to this list
We will notify you by email at least 30 days before adding or replacing any sub-processor. You may object to a new sub-processor by contacting [email protected]. If we cannot accommodate your objection, you may terminate your subscription within the notice period.
Questions
Contact [email protected].
Last updated: 15 May 2026