Trust & Privacy
TriageCounsel Subprocessors
TriageCounsel uses selected third-party service providers to host the platform, deliver core functionality, and support account operations. These providers may process customer data on our behalf only as needed to provide the service. This page lists subprocessors in active use for our production environment.
Last updated: September 2026
| Subprocessor | Purpose | Processing location | Data categories (high level) |
|---|---|---|---|
| Hetzner Online GmbH | Infrastructure hosting for the production application and stored customer data | Germany (European Union) | Account information; extracted contract text; analysis results and related customer content stored to provide the service |
| OpenAI, L.L.C. | AI-assisted contract analysis, including plain-language explanations and, where enabled, evidence discovery or playbook-related extraction requested by the customer | United States and other locations used by OpenAI for API processing (see OpenAI documentation) | Contract content and analysis context as required by the features enabled for the account or action — which may range from short excerpts to broader passages or full document text depending on configuration and use |
| Stripe, Inc. | Payment processing and subscription management | United States and other locations used by Stripe (see Stripe documentation) | Billing contact details and subscription metadata. Payment card details are collected directly by Stripe; TriageCounsel does not store card numbers |
| Google LLC | Optional user authentication (Google sign-in), when enabled | United States and other locations used by Google (see Google documentation) | Name, email address, and authentication identifiers. No contract content |
| SMTP email provider | Transactional email delivery via SMTP (password reset and account notifications) | United States and other locations used by the configured SMTP host | Recipient email address and content required to deliver the notification. No contract content |
Original uploads
Original uploaded files (such as PDF or DOCX bytes) are processed transiently to extract text and are not retained as uploaded files. Stored contract-related content consists of extracted text and derived analysis maintained to provide review history and related features, as described in our Privacy Policy.
International transfers
Primary production hosting and storage of customer content described above is located in Germany. Some subprocessors listed above may process data outside the customer’s country, including in the United States. Where required, transfers are addressed in customer agreements and applicable data protection terms.
Changes to this list
We may update this page when subprocessors change. Customers will be notified of material subprocessor changes in accordance with the applicable data processing agreement or other contract terms.
Related documents
This page provides vendor-transparency information for diligence reviews. Detailed data flows, retention, security controls, and customer-specific configuration are provided under separate agreement where applicable.