Subprocessors
Last updated: August 2026
Attest Law uses the third-party providers below to operate Attest. Each one is bound by contract to process data only on our instructions and to protect it appropriately. We share only what a provider needs to perform its function, and none of them use your case data to train AI models. We will update this list if it changes.
This list describes the service as we host it. In a standalone deployment the product runs on infrastructure your firm provides, and AI model calls can run under API agreements your firm holds directly.
| Subprocessor | What it does | Data it can reach | Location |
|---|---|---|---|
| Google Cloud Platform | Application hosting, compute, and infrastructure for the product and this site. | Case data in transit and at rest on the infrastructure the service runs on. | United States |
| Cloudflare | Authoritative DNS, CDN, and WAF/DDoS protection in front of the product and this site. | All traffic in transit. | Global edge network (United States entity) |
| Supabase | Primary database, file storage for uploaded documents, and authentication. | All application records — cases, documents, client details, users, and audit logs. | United States |
| Anthropic | AI model processing — the assistant and document analysis. | Prompt content: the document text and case details sent with a given request. | United States |
| OpenAI | AI model processing. | Prompt content: the document text and case details sent with a given request. | United States |
| Google Workspace | Internal business email, calendar, and documents. | Correspondence with your firm, and anything your firm sends us by email. | United States |
| Resend | Transactional email delivery — product notifications and contact-form submissions. | Recipient name and email address, and the contents of the messages we send. | United States |
| Sentry | Application error monitoring and performance diagnostics. | Technical error data — stack traces, request metadata, and the identifiers attached to them. | United States |
Questions
Notice of changes to this list is covered by our Data Processing Agreement. If your firm needs this list in writing, or has a question about a specific provider, write to [email protected] or send us your questionnaire. How we handle data generally is covered in our Privacy Policy and security practices.