Subprocessors
Third parties that help us provide the PrompTax service
Last updated: February 2026
We use the following subprocessors to help deliver the PrompTax service. All subprocessors are bound by appropriate data protection agreements.
| Subprocessor | Location | Purpose | Data Processed | Transfer Mechanism | Effective From |
|---|---|---|---|---|---|
|
Amazon Web Services
(EC2, RDS, S3)
|
UK (London, eu-west-2) | Cloud hosting, database, and file storage | All data (account, client data, documents) | UK-based (no transfer) | February 2026 |
|
Anthropic
|
USA | AI-powered document data extraction (primary) | Document images, extracted transaction data | SCCs + UK Addendum | February 2026 |
|
Google LLC (Gemini API)
|
USA / Global | AI-powered document data extraction (secondary/fallback) | Document images, extracted transaction data | Google Cloud DPA + SCCs | February 2026 |
|
Stripe
|
USA / EU | Payment processing | Billing information, payment details | Stripe DPA + SCCs | February 2026 |
|
AWS SES
|
UK (London) | Email delivery | Email addresses, email content | AWS DPA + UK Addendum | February 2026 |
AI Data Retention
Both Anthropic and Google may retain processed data for up to 30 days for trust, safety, and abuse detection purposes. Neither uses paid API data to train their AI models. After the retention period, data is automatically deleted.
If we intend to add or replace a sub-processor that handles personal data, we'll notify you by email at least 30 days in advance. You'll have the opportunity to object during that period, as described in our Data Processing Agreement.
Questions? Email contact@promptax.com.