Deadline Pilot uses the subprocessors below to deliver our service. Each handles a specific function — authentication, hosting, document storage, AI extraction, email delivery, or operational support. Customer data shared with each subprocessor is limited to what that function requires.
We notify customers at least 30 days before adding a new subprocessor or materially changing how an existing one is used. Notifications go to your account email and are also posted to this page.
Current subprocessors
| Subprocessor | Purpose | Data accessed | Location | DPA |
|---|---|---|---|---|
| Render | Hosting (frontend, backend, worker), managed Postgres, managed Redis | All application data — Render hosts the app | United States (Oregon) | DPA signed |
| Clerk | User authentication, session management, MFA, OAuth providers | Email, name, IP addresses, session metadata | United States | DPA signed |
| Stripe | Payment processing, subscription management, invoicing | Email, billing address, payment method tokens (no card numbers) | United States | DPA signed |
| Cloudflare | Object storage (R2) for uploaded documents and generated calendar files; DNS | Uploaded documents (PDF, DOCX), generated .ics files | Global edge (your data resides in your selected R2 jurisdiction) | DPA signed |
| Postmark | Transactional email delivery; inbound email parsing for the E-Service forwarding flow | Outbound email contents; inbound email contents (when you forward to your unique address) | United States | DPA signed |
| SendGrid | Email delivery fallback when Postmark is unavailable | Outbound email contents | United States | DPA signed |
| Anthropic | AI extraction of deadlines from court orders (Claude API) | OCR text from your uploaded documents (up to 50,000 characters per call); page images when direct-vision mode is enabled | United States | DPA signed |
| OpenAI | Alternative AI extraction provider | OCR text from your uploaded documents (when configured as the active provider) | United States | DPA signed |
| Google Cloud (Vision API) | OCR for scanned PDFs | PNG renders of your document pages (typically 200–300 DPI) | United States | DPA signed |
| Sentry | Error tracking and performance monitoring (when enabled) | Exception messages, request metadata (sanitized to remove credentials and PII) | United States | DPA signed |
| GitHub | Source code, CI/CD pipelines, dependency vulnerability scanning | Source code only — no customer data | United States | Standard ToS |
Questions or objections
If you have questions about how these subprocessors handle your data, or if you'd like to object to the addition of a new subprocessor, contact privacy@deadlinepilot.com. For security reports, see our security page.