Legal
Sub-processors
Last updated November 1, 2026
To run Docsheaf we rely on a small number of service providers. When they handle personal data on behalf of our customers they act as our sub-processors, under written agreements that require them to protect it. This list complements our privacy policy and data processing agreement.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| To be confirmed | Application servers and database that run Docsheaf | All account, organization and content data | To be confirmed |
| Cloudflare, Inc. | DNS, content delivery, TLS for docs sites and custom domains; storage of uploaded files (R2) | Request metadata such as IP addresses; published pages in its cache; uploaded files | Global network (United States) |
| To be confirmed | Delivery of transactional email (sign-up codes, security alerts, invitations) | Recipient name and email address, email content | To be confirmed |
| Paddle.com Market Ltd | Reseller and Merchant of Record for paid plans: payments, sales tax, invoices | Billing contact and payment details given at checkout; the signed-in user’s email address and the organization identifier | United Kingdom |
| Anthropic, PBC | Writes the AI Assistant’s answers on docs sites that turn on “Ask AI” | Readers’ questions (with the earlier questions and answers of the conversation) and excerpts of the site’s published pages | United States |
| Functional Software, Inc. (Sentry) | Error monitoring of the application | Error reports: stack traces, page or API paths without query strings, browser type, internal user IDs | United States |
Changes to this list
We update this page before a new sub-processor starts handling customer personal data. To be told about changes by email, or to object to a new sub-processor, write to [email protected].