LEGAL 04Subprocessors
Subprocessors
Last updated July 10, 2026 · version draft-2026-07-10
These are the vendors that run Fillall, with what each one does and — the column that matters — what customer data it can touch. The strongest line in this table: the AI providers analyze the structure of form documents during setup and never receive the data you fill into forms. Rendering is deterministic code, not AI.
| Vendor | Role | Data touched | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, edge compute, job queues, and encrypted object storage (R2) — the application and its file storage run on Cloudflare | All traffic in transit; uploaded data files and generated PDFs at rest (US region) | United States |
| Neon, Inc. | Managed Postgres database | Account data and saved form records (never spreadsheet cell values — files stay in object storage) | United States (AWS us-east-2, Ohio) |
| Stripe, Inc. | Payment processing, invoicing, and the billing portal | Billing identity and payment details (card numbers are held by Stripe, not by us). No form data | United States |
| Postal | Transactional email delivery (sign-in, account, and job notifications) | Your email address and notification metadata (e.g. job name and counts). No form-fill values | New Zealand (global delivery infrastructure) |
| Anthropic, PBC | AI analysis of form structure during form setup (detecting and naming fillable fields) | Form documents uploaded for setup and field names/labels only — never form-fill data (records, spreadsheet rows, or rendered PDFs) | United States |
| OpenAI, L.L.C. | Alternative AI provider for the same form-structure analysis (used only when selected; default is Anthropic) | Same strict scope as Anthropic: form structure only, never form-fill data | United States |
Not subprocessors, but worth naming: Google acts as an identity provider if you choose "Sign in with Google" — we receive your name, email, and avatar from Google; no customer data flows the other way beyond the sign-in handshake itself.
Changes. We update this page before adding or replacing a vendor that handles customer data. Customers with an executed DPA are additionally notified by email and may object on reasonable data-protection grounds.
Questions about any vendor on this list: support@fillall.io.