Sub-processors
These are the third parties Scriptum uses to provide its service. This list mirrors Annex 2 of our Data Protection Policy, which governs.
| Sub-processor | Purpose | Data | Storage and processing |
|---|---|---|---|
| Supabase, Inc. | Database, sign-in, file storage and server functions | All Customer Data and account data | Stored in the European Union (Frankfurt) |
| OpenAI | Parsing, tagging, search indexing, drafting suggestions and questions | Document text and prompts, when an AI feature runs | Processed in the United States. Not a storage location for Customer Data |
| Anthropic | AI agents for drafting, review, negotiation, collaboration and close-out | Document text and prompts, when an agent runs | Processed in the United States. Not a storage location for Customer Data |
| Resend | Service emails | Names, email addresses and notification content | United States |
| Render Services, Inc. | Serving the workspace and Word add-in application files | Technical data such as IP addresses. No matter content is stored | United States |
Changes to this list
We give customers at least 30 days' notice before adding or replacing a sub-processor. If a customer objects on reasonable data protection grounds and the objection cannot be resolved, the customer may end the affected part of the service and receive a pro rata refund of prepaid fees for it.
Where customer data is stored
All customer data is stored in the European Union, in Frankfurt, Germany. AI providers process document text in the United States when an AI feature runs, and do not store it as a location for customer data. See our security page for more.