Sub-processors
These are the third parties that process customer data on our behalf. We notify customers at least 30 days before we add one or change what an existing one receives, and a customer may object within that period. Our data processing agreement gives each one's legal entity and the basis for any transfer outside the EEA.
Processing article content
These receive the text of articles or drafts, or extracts from it.
| Service | Purpose | What it receives | Location |
|---|---|---|---|
| Microsoft (Azure OpenAI) | Language models for analysis, Find sources and archive search | The full article or draft and the outlet profile | EU Data Zone, Sweden |
| Google Cloud | Runs our servers; stores uploaded files, reports and database backups; translates Danish and Norwegian articles before batch scoring | Everything the service processes | Netherlands. Translation in the EU |
| Supabase | Database and sign-in | Accounts, analysis results including the passages quoted from your text, article extracts | Germany. The company is based in Singapore |
| Vercel | Frontend hosting | Account data, and analysis results when a stored analysis or report is displayed | Germany, apart from the routing layer. The company is based in the United States |
| Cloudflare | Inbound email | The full draft in transit, as the body of the email. Email channel only | Its global network |
| Sentry | Error monitoring | Error reports, configured not to include article text | Germany. The company is based in the United States |
Processing content derived from articles
These never see the article itself, but they see material generated from it.
| Service | Purpose | What it receives | Location |
|---|---|---|---|
| Serper.dev | Web search for Find sources | Search queries written by the model from your article. These can contain names taken from the draft | United StatesNo data processing agreement |
| Jina AI | Reads the pages search returns | The URLs of up to ten search results | United StatesElastic data processing agreement |
| OpenAlex | Academic source lookup | One academic search query in English | United StatesNo data processing agreement |
| Resend | Sends account emails and the email reply | The recipient address and the message. A reply carries the finished assessment, not the article | Sent from Ireland; stored in the United StatesStored for 30 days |
Also worth knowing
Find sources sends search queries written from your article to Serper.dev and OpenAlex in the United States. A query can contain a name from the article, and neither service has a data processing agreement with us. The account owner can switch the feature off for the whole newsroom, and each journalist can switch it off for themselves.
Vercel's routing layer runs worldwide. It handles the session cookie and the user's email address, not article text.
Microsoft may store text its systems flag, for up to 30 days, and have it reviewed by staff in the EEA.
Questions about data handling