Substanto Ltd engages the third-party subprocessors below to help deliver the Service. Each processes the data shown, in the location shown, under a data processing agreement with obligations no less protective than our own Data Processing Agreement. Our AI subprocessors do not use our inputs or outputs to train their models: Anthropic under its commercial terms, and Voyage AI because we have opted out of training.
| Subprocessor (entity, country) | Purpose | Data shared |
|---|---|---|
| Anthropic, PBC (United States) | Drafting answers from your context (Claude API) | Question text and relevant document / answer excerpts |
| Voyage AI, Inc. (United States) | Semantic matching (embeddings); we have opted out of training | Full text of uploaded documents (chunked) and query text |
| Render, Inc. (United States, Oregon) | Application hosting | Service data processed by the application (in transit) |
| Supabase, Inc. (data stored in the EU: Ireland, eu-west-1) | Database hosting | Account data and Your Content |
| Vercel, Inc. (United States) | Frontend and app hosting; cookieless website analytics (Vercel Web Analytics) | Static app assets; aggregate page views and referrers. No document content, no cookies, no personal data |
| Plus Five Five, Inc. (Resend): US company; email sent from the EU (Ireland) | Transactional email (e.g. password resets, account notices) | Account email address |
| GitHub, Inc. (United States) | Weekly database backups (stored as private, encrypted files and deleted after 28 days) | An encrypted copy of the database: account data and Your Content |
| Stripe (not yet enabled) | Payments and billing (planned) | None today; no billing data is shared. This page will be updated before any payment processing begins. |
We give at least 30 days' notice before adding or replacing a subprocessor, and a reasonable opportunity to object, as set out in our Data Processing Agreement.
Substanto Ltd. Registered in England and Wales, company number 17447004. Registered office: Unit 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE.
Version 1.1, 4 October 2026. Supersedes the version dated 8 September 2026.