Substanto

Subprocessors

Last updated: 19 October 2026

Substanto Ltd engages the third-party subprocessors below to help deliver the Service. Each processes the data shown, in the location shown, under a data processing agreement with obligations no less protective than our own Data Processing Agreement. Our AI subprocessors do not use our inputs or outputs to train their models: Anthropic under its commercial terms, and Voyage AI because we have opted out of training.

Subprocessor (entity, country)PurposeData shared
Anthropic, PBC (United States)Drafting answers from your context (Claude API)Question text and relevant document / answer excerpts
Voyage AI, Inc. (United States)Semantic matching (embeddings); we have opted out of trainingFull text of uploaded documents (chunked) and query text
Render, Inc. (United States, Oregon)Application hostingService data processed by the application (in transit)
Supabase, Inc. (data stored in the EU: Ireland, eu-west-1)Database hostingAccount data and Your Content
Vercel, Inc. (United States)Frontend and app hosting; cookieless website analytics (Vercel Web Analytics)Static app assets; aggregate page views and referrers. No document content, no cookies, no personal data
Plus Five Five, Inc. (Resend): US company; email sent from the EU (Ireland)Transactional email (e.g. password resets, account notices)Account email address
GitHub, Inc. (United States)Weekly database backups (stored as private, encrypted files and deleted after 28 days)An encrypted copy of the database: account data and Your Content
Stripe (not yet enabled)Payments and billing (planned)None today; no billing data is shared. This page will be updated before any payment processing begins.

We give at least 30 days' notice before adding or replacing a subprocessor, and a reasonable opportunity to object, as set out in our Data Processing Agreement.


← Privacy Policy  ·  Data Processing Agreement  ·  Home

Substanto Ltd. Registered in England and Wales, company number 17447004. Registered office: Unit 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE.

Version 1.1, 4 October 2026. Supersedes the version dated 8 September 2026.