This page lists the subprocessors that DecoverHQ, Inc. (“DecoverAI,” “we,” “our,” or “us”) engages to process Customer Data in connection with the Services, as contemplated by Section 7.5 of our Terms of Service and our Data Processing Agreement (“DPA”). Each subprocessor is bound by written data protection obligations no less protective than those in our DPA, including confidentiality, security, and, where applicable, international transfer safeguards such as the Standard Contractual Clauses.
We will provide Customers with at least thirty (30) days’ prior written notice before adding any new subprocessor that will process Customer Data, in accordance with our DPA. To subscribe to change notifications or request our current DPA and SCCs, contact support@decover.ai.
Subprocessors Engaged for Customer Data
The following subprocessors support the core DecoverAI platform — document storage and hosting, AI-assisted review, search, and billing.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud hosting, document storage (S3), database (RDS), managed search (OpenSearch), authentication (Cognito), transactional email (SES), and content delivery (CloudFront) | United States |
| Subprocessor | Purpose | Location |
|---|---|---|
| OpenAI, L.L.C. | AI model inference for document analysis, classification, and question answering | United States |
| Anthropic, PBC | AI model inference for document analysis, classification, and question answering | United States |
| Google LLC (Gemini API) | AI model inference for document analysis, classification, and question answering | United States |
| OpenRouter, Inc. | Routing layer used to access additional supported AI models | United States |
| Mistral AI | Optical character recognition (OCR) of scanned documents and PDFs | France |
| Cohere Inc. | Search result re-ranking to improve relevance | Canada |
| E2B | Sandboxed, isolated code execution supporting AI agent workflows | United States |
| Parallel Web Systems, Inc. | Web search grounding for AI-generated answers and citations | United States |
| UniCourt, Inc. | Legal case-law and litigation research data for AI-assisted legal research features | United States |
| Subprocessor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing, billing, and invoicing | United States |
| Subprocessor | Purpose | Location |
|---|---|---|
| Loops | Transactional email delivery (invitations, sharing notifications, account alerts) | United States |
Customer-Authorized Integrations
Where a Customer chooses to connect an external data source or productivity tool to the Services (for example, to import documents for review), DecoverAI accesses that source solely at the Customer’s direction and under the Customer’s own agreement with that provider. These connections are configured by the Customer and are not subprocessors that DecoverAI engages on its own behalf, but are listed here for transparency:
- Microsoft (SharePoint, OneDrive, Microsoft 365 / Graph API)
- Google (Google Drive, Gmail)
- Dropbox
- Box
- iManage
- Clio
- Amazon S3 (Customer-owned buckets)
Website Analytics & Marketing
Vendors that support our public website and marketing communications (for example, Google Analytics, Heap, LinkedIn Insight Tag, and Google Ads) do not process Customer Data submitted through the Services. These are disclosed separately in Section 6.1 of our Privacy Policy.
Questions
If you have questions about this list, need a copy of our DPA or Standard Contractual Clauses, or would like to be added to our subprocessor change-notification list, please contact us at support@decover.ai.