Sub-processors
Last updated November 2, 2026
Hereby uses the following third parties ("sub-processors") to provide the Service. Each one processes personal data only to perform its service for us, under a written agreement with data protection terms at least as protective as our Data Processing Agreement.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| netcup GmbH | Server hosting for the application and its database | All customer data | Germany |
| Amazon Web Services (Amazon S3) | Storage of uploaded files and documents, and encrypted database backups | All customer data | European Union (Frankfurt, Germany) |
| Cloudflare, Inc. | DNS, TLS, network tunnel and protection against attacks | Request data (IP address, headers); content in transit | Global network, United States |
| Resend (Plus Five Five, Inc.) | Sending email: sign-in codes, invitations, signing requests, completed documents | Recipient email addresses, email content and attachments | United States, Japan |
| Anthropic, PBC | AI that prepares documents for signing (only when AI is on and used) | Document pages and text sent for processing | United States |
| TypeSafe (typesafe.ai) | AI pre-classification of document text for field detection (only when AI is on and used) | Document text sent for processing | United States |
| Polar Software Inc. | Merchant of Record: checkout, payments, invoices, sales tax and VAT | Billing contact, payment details, purchase records | United States |
Changes to this list
We will update this page before we add or replace a sub-processor. Customers who want notice of changes can email [email protected] to subscribe. Under the DPA, a customer may object to a new sub-processor on reasonable data protection grounds within 30 days of notice.