Subprocessor List
Last updated: March 9, 2026
About This List
Tutelr uses the following third-party subprocessors to provide our contract analysis service. This list is maintained in accordance with our Data Processing Agreement. We will notify customers at least 30 days before adding new subprocessors.
Current Subprocessors
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Cloudflare | Hosting, CDN, edge compute (Workers), DDoS protection | Global | All service data (requests, responses, static assets) |
| Turso (ChiselStrike) | Primary database | US / EU | User accounts, contract metadata, analysis results |
| Stripe | Payment processing and subscription management | US | Payment details, billing email, subscription status |
| Resend | Transactional email delivery | US | Email addresses, email content |
| Anthropic | AI-powered contract analysis (Claude) | US | Contract text (processed in real-time, not stored by Anthropic) |
Cloudflare
- Purpose
- Hosting, CDN, edge compute (Workers), DDoS protection
- Location
- Global
- Data Processed
- All service data (requests, responses, static assets)
Turso (ChiselStrike)
- Purpose
- Primary database
- Location
- US / EU
- Data Processed
- User accounts, contract metadata, analysis results
Stripe
- Purpose
- Payment processing and subscription management
- Location
- US
- Data Processed
- Payment details, billing email, subscription status
Resend
- Purpose
- Transactional email delivery
- Location
- US
- Data Processed
- Email addresses, email content
Anthropic
- Purpose
- AI-powered contract analysis (Claude)
- Location
- US
- Data Processed
- Contract text (processed in real-time, not stored by Anthropic)
Change Notification
We will notify customers at least 30 days before adding or replacing any subprocessor. Notifications will be sent via email to the account owner's registered email address and will also be reflected on this page.
If you object to a new subprocessor, you may terminate the affected service in accordance with the termination provisions in our Data Processing Agreement.
Data Processing Details
AI Processing (Anthropic)
When you submit a contract for analysis, the contract text is sent to Anthropic's Claude API for real-time analysis. Anthropic processes the text to generate risk assessments and does not store your contract content after processing. Anthropic's data processing practices are governed by their enterprise API terms, which prohibit using customer data for model training.
Payment Processing (Stripe)
Stripe processes payment information directly. Tutelr does not store credit card numbers or sensitive payment details. Stripe is PCI DSS Level 1 certified.
Contact
For questions about our subprocessors or data processing practices:
- Email: [email protected]
- Support: Contact Form