Sub-processors

1. About this list

A “sub-processor” is a third party we engage to process personal data when providing the Service. We put in place data-protection terms with each consistent with our Privacy Policy. We will give notice of material changes to this list as described in that policy and our Data Processing Addendum.

2. Infrastructure, storage and email

• Amazon Web Services, Inc. (AWS), United States — our infrastructure provider. Your account data and document content are stored in the us-west-2 region (application hosting, S3 file storage, the DynamoDB database, Cognito authentication, and KMS key management and secrets storage). Transactional email is sent via Amazon SES, which may operate from another US region.

3. Payments

• Stripe, Inc., United States — payment processing and subscription billing. Stripe handles your card details on its own systems; DotMD never stores card numbers.

4. AI model providers

• Google LLC, United States — Google Gemini processes eligible bounded edits for the included “DotMD AI” feature using our platform credentials. These requests include the selected text, bounded surrounding context, and the member’s instruction.
• Anthropic, PBC, United States — Anthropic Claude processes complex work or fallback requests for the included “DotMD AI” feature using our platform credentials. The request includes the whole-document, explicitly referenced-document, or other scope the member requested.
• Bring Your Own Key providers — when you connect your own key, the provider you choose (such as OpenAI, Anthropic, Google Gemini, or a compatible endpoint) processes your prompts under your own account and its terms. These providers are engaged by you, the customer, under your own relationship with them — not sub-processors that DotMD contracts with on your behalf.

5. Analytics

• Google LLC, United States — after you consent, Google Analytics 4 processes content-free product and business usage events, and Google BigQuery stores the analytics warehouse data. Advertising signals and ads personalisation are disabled.

6. Optional integrations you enable

• GitHub, Inc., United States — only if you connect a repository, to sync document content you choose.
• Google LLC, United States — only if you sign in with Google, for authentication (brokered through AWS Cognito).

Questions about our sub-processors? Contact us at

.