Sub-processors
Last updated May 6, 2026
A “sub-processor” is a third-party service that processes Personal Data on our behalf to provide the docInsured platform. The list below is current as of the date above and is published in addition to any data processing addendum (DPA) signed with a B2B customer.
List version: 2026-05-06.1. We bump this version on every change. B2B customers with an executed DPA will receive at least 30 days advance email notice of any addition, removal, or role change to this list, in line with GDPR Article 28(2).
Current sub-processors
- Vercel, Inc.
United States
- Application hosting, edge network, serverless function execution
- Neon, Inc.
United States
- Managed Postgres database (primary record store)
- Clerk, Inc.
United States
- User authentication, identity, and session management
- Resend, Inc.
United States
- Outbound transactional email delivery
- Anthropic PBC
United States
- Claude API used to extract structured data from uploaded ACORD 25 certificates
- Vercel Blob (Vercel, Inc.)
United States
- Encrypted object storage for uploaded certificate files
- Upstash, Inc.
United States
- Redis-compatible key-value store for rate-limit counters
- Functional Software, Inc. (Sentry)
United States
- Application error and performance monitoring
- Stripe, Inc.
United States
- Payment processing and subscription billing. Wired but inactive — payment flows activate at first paying customer; no cardholder data is processed today.
How we evaluate new sub-processors
Before onboarding a new sub-processor we check that they (1) publish a privacy policy and security posture appropriate to the data they will process, (2) sign a data processing agreement (or have one baked into their standard terms), and (3) operate in a jurisdiction compatible with our customers’ data-transfer expectations. Today every sub-processor on the list above is United States-based.
How to subscribe to updates
B2B customers under an executed DPA receive sub-processor updates by email automatically. If you would like to receive change-notice emails without a DPA in place, contact support@docinsured.com and we’ll add you to the notification list.
Questions
Email support@docinsured.com.