← back to legal

legal /subprocessors
Subprocessors

Last updated: March 23rd, 2026

Infrastructure & Hosting

SubprocessorPurpose
CloudflareObject storage (R2), edge compute (Workers, Durable Objects, KV), static hosting (Pages)
MongoDBPrimary application database
Fly.ioApplication hosting and compute
RedisCaching and real-time pub/sub

Authentication

SubprocessorPurpose
WorkOSUser authentication, SSO, and session management

Payments

SubprocessorPurpose
StripeBilling, subscriptions, and payment processing

Analytics & Monitoring

SubprocessorPurpose
PostHogProduct analytics and usage tracking
SentryError tracking and performance monitoring

Communications

SubprocessorPurpose
ResendTransactional email delivery
PlainCustomer support and feedback management

AI & Machine Learning

SubprocessorPurpose
AnthropicAI-powered features
OpenAIAI-powered features
Google GeminiAI-powered design generation
ReplicateAI image generation

Desktop Distribution

SubprocessorPurpose
ToDesktopDesktop app packaging, updates, and distribution

Corporate Tools

SubprocessorPurpose
Google WorkspaceEmail, document storage, and internal collaboration
SlackInternal team communication and incident response
LinearIssue tracking and project management
NotionInternal documentation and knowledge base

CI/CD & Development

SubprocessorPurpose
GitHubSource control, CI/CD pipelines (Actions)

If you have questions about our subprocessors or data processing practices, contact us at operations@paper.design.