Probity Subprocessors

Draft date: September 13, 2026

This is the current list of subprocessors Probity uses to provide the product, referenced from the Privacy Policy, section 5. We will update this list before adding or replacing a subprocessor that touches customer data, and will notify active account holders of a material change by email.

Vendor	Purpose	Data it processes	Region	Terms
Supabase	Database (Postgres) and object storage for documents and application data	Account data, uploaded documents, journal content, pipeline and deal data	United States	supabase.com/legal
Vercel	Application hosting and serverless compute	Application traffic; transiently processes the same data as Supabase while a request is in flight	United States	vercel.com/legal
Anthropic	AI analysis (SDE Recast, Cash Proof, spread refresh, Q&A, visit question prep, debrief structuring)	Document text and file content submitted for the specific analysis requested	United States (per Anthropic's published API infrastructure)	anthropic.com/legal/commercial-terms, anthropic.com/legal/privacy
Cloudflare	DNS and email routing (Sourcing Agent's forwarding address)	Email headers and content forwarded by a Pro subscriber to their private forwarding address	United States / global network	cloudflare.com/trust-hub
Google	Sign-in (OAuth authentication)	Name, email address, profile photo (authentication scopes only; no mailbox or Drive access)	United States / global	policies.google.com/privacy
Microsoft	Sign-in (OAuth authentication)	Name, email address, profile photo (authentication scopes only; no mailbox or OneDrive access)	United States / global	privacy.microsoft.com
Stripe	Payment processing for Pro subscriptions and Diligence Room purchases (planned; not yet live)	Card and billing details; Probity receives payment status and partial card identifiers only, not full card numbers	United States	stripe.com/legal

Questions about this list: hello@useprobity.com.