Subprocessors
Subprocessor policy details
Last Updated: May 3, 2026
To deliver our Services, Kaytos, LLC, which operates paperwork.bot, engages a small set of third-party service providers ("subprocessors") that may process customer personal information on our behalf. We choose subprocessors based on the role they perform and the privacy and security protections they make available for the Services.
This list is provided for transparency and may change from time to time. We will update this page when we add or remove a subprocessor; the "Last Updated" date above reflects the most recent change.
Cloud Infrastructure
| Provider | Purpose | Region(s) |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Application hosting, primary database (RDS), object storage for uploaded documents (S3), background queue infrastructure, and serverless document-processing functions. | United States |
| Cloudflare, Inc. | DNS and edge networking for our domains. | Global edge |
Email and Communications
| Provider | Purpose | Region(s) |
|---|---|---|
| Amazon Simple Email Service (Amazon SES, an AWS service) | Outbound transactional and notification email delivery, and inbound email receipt for customer-configured intake addresses. | United States |
Billing and Payments
| Provider | Purpose | Region(s) |
|---|---|---|
| Stripe, Inc. | Subscription billing and payment processing. Cardholder data is collected directly by Stripe and is not stored on our systems. | United States |
Artificial Intelligence and Machine Learning
The AI providers below process content from your documents and account data to power features such as document extraction, data analysis, content generation, search, and workflow automation. We use these providers' API offerings for inference and do not authorize them to use your data to train their models.
| Provider | Purpose | Region(s) |
|---|---|---|
| Microsoft Corporation (Azure OpenAI Service) | Large language model inference and embeddings (OpenAI GPT family hosted by Microsoft Azure). We use Azure OpenAI as our primary OpenAI access path. | United States |
| Anthropic, PBC | Large language model inference (Claude family), accessed directly and, in some configurations, via Microsoft Azure. | United States |
| Google LLC (Gemini API / Vertex AI) | Large language model inference and document processing (Gemini family). | United States |
| Amazon Web Services, Inc. (Amazon Bedrock) | Managed access to additional foundation models for inference. | United States |
| Mistral AI | Foundation model inference (used for select features). | European Union / United States |
Operational Tooling
| Provider | Purpose | Region(s) |
|---|---|---|
| Functional Software, Inc. (Sentry) | Error monitoring and performance diagnostics. Used to identify and resolve issues with our Services. Not used for marketing or behavioral tracking. | United States |
Search Infrastructure
We operate our own search infrastructure (Meilisearch) on infrastructure we control within Amazon Web Services. It is not a third-party subprocessor.
Notice of Changes
If we add or replace a subprocessor that materially affects how customer personal information is processed, we will update this page. Customers with a Data Processing Agreement may also receive notice in accordance with that agreement. To request a copy of our DPA or to receive subprocessor change notifications by email, contact us at support@paperwork.bot.