Security and privacy
Everyone who touches your data.
12 companies. Consumer products almost never publish this, which is exactly why it is worth publishing. If a name is not on this list, it does not receive your information.
Supabase, Inc.
Receives: All account data, case data, and uploaded document files.
Why: Authentication, database, and file storage. Data is held in the United States (AWS us-east-2, Ohio).
Vercel, Inc.
Receives: All request traffic, including data processed server-side while you use the Services.
Why: Application hosting and content delivery. Served from the United States (iad1).
Stripe, Inc.
Receives: Billing name, billing address, payment method details, and transaction events.
Why: Payment processing. Card details go to Stripe directly; we never receive or store full card numbers.
Anthropic PBC
Receives: The images and PDFs you upload to PassVault, and the text extracted from them.
Why: Reading your documents to extract names, dates, and places for eligibility and form prefill. Under Anthropic's Commercial Terms, Anthropic may not train its models on this content, and inputs and outputs are deleted within 30 days.
Google LLC
Receives: Your email address, name, profile photo, and provider identifier — only if you choose to sign in with Google.
Why: Federated sign-in.
Cloudflare, Inc.
Receives: Your IP address and a browser challenge token.
Why: Turnstile bot challenge on the sign-in entry point, to stop automated abuse.
Loops
Receives: Your email address and notification metadata.
Why: Transactional and notification email. Documents, document links, and case file contents are never sent by email.
Cal.com, Inc.
Receives: Your name, email address, and booking details.
Why: Scheduling and managing Family Kickoff calls.
Geoapify GmbH
Receives: The address and place text you type into an address field.
Why: Address and place autocomplete. Requests are proxied through our servers.
FamilySearch International
Receives: Your authorisation to connect, and the genealogical records you choose to import.
Why: Importing your existing family tree — only when you connect the account yourself.
Lob.com, Inc.
Receives: Your name and mailing address, and the contents of a printed kit.
Why: Printing and posting a physical kit to you, where that is part of what you bought. Not used unless that fulfilment path is enabled for your order.
TrustedSite
Receives: Page-load telemetry from visitors to our public site.
Why: Site verification trustmark on public marketing pages. It does not receive account or case data.
Naming them is checkable. A badge is not.
Two things worth noticing.
No analytics or advertising company is on this list. We do not use a subprocessor that receives your case data or your document contents for measurement or marketing purposes.
Only one AI provider is on it. Anthropic reads your documents so the platform can check eligibility and prefill your forms. Its Commercial Terms bar training on that content and delete inputs within 30 days. No other model provider receives anything from us.
If we add a subprocessor that receives personal information, we update this list and Section 5.1 of the Privacy Policy before it begins processing. The Privacy Policy is the controlling document; this page is the readable version of it.