Deadline Pilot uses the subprocessors below to deliver our service. Each handles a specific function — authentication, hosting, document storage, AI extraction, email delivery, or operational support. Customer data shared with each subprocessor is limited to what that function requires.
We notify customers at least 30 days before adding a new subprocessor or materially changing how an existing one is used. Notifications go to your account email and are also posted to this page.
What the status column means. DPA signed means a data processing agreement is executed with that vendor. DPA pending means we rely on the vendor’s standard terms while the agreement is being put in place. Standard ToS means the vendor receives no customer data, so no processing agreement is required.
Rows marked Not in use are providers our software can be configured to use but which receive nothing today. They are listed in advance so that enabling one is never a surprise.
Updated 2026-09-11: the statuses for Anthropic, OpenAI and Google Cloud were corrected from “signed” to “pending”, and Migadu, Namecheap, DeepSeek, xAI and Portkey were added. If you need a signed agreement with any specific vendor before you use the service, write to privacy@deadlinepilot.com and we will tell you where that stands.
Updated 2026-10-20: descriptions corrected, no vendor added or removed. Cloudflare’s row now names everything held in R2, including the nightly database backups that were already stored there; SendGrid is described as an alternative provider rather than an automatic fallback; the AI and Google Cloud rows now include the first page of served e-service filings; Clerk no longer lists sign-in providers we do not offer.
Updated 2026-10-21: descriptions corrected, no vendor added or removed. Google Cloud Vision receives every page of each uploaded PDF, not only scanned ones; Postmark always carries processed e-service filings; OpenAI, DeepSeek and xAI rows now include page images in direct-vision mode.
Current subprocessors
| Subprocessor | Purpose | Data accessed | Location | DPA |
|---|---|---|---|---|
| Render | Hosting (frontend, backend, worker), managed Postgres, managed Redis | All application data — Render hosts the app | United States (Oregon) | DPA signed |
| Clerk | User authentication, session management, MFA | Email, name, IP addresses, session metadata | United States | DPA signed |
| Stripe | Payment processing, subscription management, invoicing | Email, billing address, payment method tokens (no card numbers) | United States | DPA signed |
| Cloudflare | Object storage (R2) for uploaded documents, e-service emails and filings, data exports, audit-log archives and nightly database backups; CDN in front of the site | All application data, through the nightly database backups, plus uploaded documents, e-service emails and filings, and data exports | Global edge network (CDN); R2 storage location chosen by Cloudflare for our bucket | DPA signed |
| Postmark | Delivery of processed e-service filings, with the filings attached (always, whichever email provider is configured); other transactional email when it is the configured provider; inbound email parsing for the E-Service forwarding flow | Outbound email contents; inbound email contents (when you forward to your unique address) | United States | DPA signed |
| SendGrid | Transactional email delivery when it is the configured email provider (there is no automatic failover; e-service filing deliveries always go through Postmark) | Outbound email contents | United States | DPA signed |
| Anthropic | AI extraction of deadlines from court orders, and of titles from served e-service filings (Claude API) | OCR text from your uploaded documents (up to 50,000 characters per call); page images when direct-vision mode is enabled; the first page of each served e-service filing, as text or as an image | United States | DPA pending |
| OpenAI | Alternative AI extraction provider | When configured as the active provider: OCR text from your uploaded documents; page images (up to 25 per document) when direct-vision mode is enabled; the first page of each served e-service filing, as text or as an image | United States | DPA pending |
| Google Cloud (Vision API) | Text recognition (OCR) of PDF pages: every page of each uploaded PDF, scanned or not, unless this step is switched off | PNG renders of your document pages, and of the first page of each served e-service filing (up to 200 DPI) | United States | DPA pending |
| Sentry | Error tracking and performance monitoring (when enabled) | Exception messages and request metadata; credentials, request bodies and email addresses are removed before sending | United States | DPA signed |
| Migadu | Inbound email for our @deadlinepilot.com addresses | Any message you send to privacy@, legal@, security@, support@ or accessibility@ — including the content of a data-subject access, correction or erasure request | Switzerland / European Union | DPA pending |
| Namecheap | Authoritative DNS for deadlinepilot.com | No customer data — DNS records only | United States | Standard ToS |
| DeepSeekNot in use | Selectable alternative AI extraction provider | None today. Would receive OCR text from your documents, or page images in direct-vision mode, if enabled. | China | DPA pending |
| xAI (Grok)Not in use | Selectable alternative AI extraction provider | None today. Would receive OCR text from your documents, or page images in direct-vision mode, if enabled. | United States | DPA pending |
| PortkeyNot in use | Optional AI gateway that proxies requests to the provider above | None today. Would receive whatever the AI provider receives if enabled. | United States | DPA pending |
| GitHub | Source code, CI/CD pipelines, dependency vulnerability scanning | Source code only — no customer data | United States | Standard ToS |
Questions or objections
If you have questions about how these subprocessors handle your data, or if you'd like to object to the addition of a new subprocessor, contact privacy@deadlinepilot.com. For security reports, see our security page.