Privacy

Service providers and subprocessors

The production provider list is not final. Before real records are accepted, this page will identify each provider, processing purpose, data location where material, and applicable contractual safeguards.

Expected provider categories

  • Application hosting and managed database
  • Private encrypted object storage and backup
  • Transactional email delivery
  • Malware scanning
  • Error monitoring and operational telemetry
  • Document extraction or language-model APIs configured for business data use

Provider controls

Production selection requires written security commitments, confidentiality, appropriate data-use restrictions, deletion and return terms, incident notification, and a prohibition on training general models with customer documents unless separately authorized.

Questions

Contact privacy@duefound.com.