Sub-processors

1. About this list

A “sub-processor” is a third party we engage to process personal data when providing the Service. We put in place data-protection terms with each consistent with our Privacy Policy. We will give notice of material changes to this list as described in that policy and our Data Processing Addendum.

2. Infrastructure, storage and email

• Amazon Web Services, Inc. (AWS), United States — our infrastructure provider. Your account data and document content are stored in the us-west-2 region (application hosting, S3 file storage, the DynamoDB database, Cognito authentication, and KMS key management and secrets storage). Transactional email is sent via Amazon SES, which may operate from another US region.

3. Payments

• Stripe, Inc., United States — payment processing and subscription billing. Stripe handles your card details on its own systems; DotMD never stores card numbers.

4. AI model providers

• Anthropic, PBC, United States — processes prompts for the included “DotMD AI” feature using our platform key. Only the text you select, a bounded amount of surrounding context, and your instruction are sent.
• Bring Your Own Key providers — when you connect your own key, the provider you choose (such as OpenAI, Anthropic, Google Gemini, or a compatible endpoint) processes your prompts under your own account and its terms. These providers are engaged by you, the customer, under your own relationship with them — not sub-processors that DotMD contracts with on your behalf.

5. Optional integrations you enable

• GitHub, Inc., United States — only if you connect a repository, to sync document content you choose.
• Google LLC, United States — only if you sign in with Google, for authentication (brokered through AWS Cognito).

Questions about our sub-processors? Contact us at

.