Sub-Processors
Last updated: June 2026
Overview
structIQ uses a small set of vetted third-party service providers (“sub-processors”) to operate the service. Each sub-processor is contractually bound to process your data only on our behalf and only as needed to provide their part of the service — never for their own purposes, and never to train AI models on your content.
This page lists all current sub-processors. We maintain it as our sub-processors change. If you would like to be notified of changes to this list before they take effect, contact us at privacy@structiq.co and we will add you to our sub-processor change notifications.
Current sub-processors
| Sub-processor | Purpose | Data processed | Processing location | Data Processing Agreement |
|---|---|---|---|---|
| Anthropic, PBC | AI processing: powers epic generation, content review, estimation, chat, and the extraction and cross-document analysis of structured information from your uploaded documents. | Text excerpts derived from your project data and uploaded documents. | United States | Yes — Anthropic's Data Processing Addendum; Anthropic is contractually prohibited from training models on customer content. |
| Voyage AI Innovations, Inc. (a MongoDB company) | AI embeddings: generates numerical embeddings of short text excerpts to power cross-document duplicate and relationship detection. | Short text excerpts derived from your project data. | United States | Yes; structIQ has opted out of Voyage's data-retention and model-training program (zero-day retention; your data is never stored or used to train any model). |
| Supabase, Inc. | Database, authentication, and file storage: stores your project data and uploaded documents with encryption at rest and row-level security. | Account information, project data, uploaded documents. | European Union (Dublin, Ireland, eu-west-1) | Yes. |
| Vercel, Inc. | Application hosting and compute: serves the application and runs server-side processing. No user content is persistently stored on Vercel's infrastructure. | Data transiently processed during request handling (not persistently stored). | European Union (Dublin, Ireland, eu-west-1) | Yes. |
| Stripe, Inc. | Payment processing: handles subscription billing and payment information. Stripe is PCI-DSS compliant; structIQ never stores your card details. | Payment and billing information (name, billing details, payment method); structIQ does not receive or store full card numbers. | United States | Yes. |
| Resend (Plus Five Five, Inc.) | Transactional email: sends account and system emails such as sign-up confirmation and password reset. Not used for marketing. | Email address and the contents of transactional messages. | Ireland | Yes. |
| Functional Software, Inc. (Sentry) | Error and performance monitoring: captures technical diagnostic data to help detect and fix failures. | Technical diagnostic data (error traces, performance metrics); configured to avoid capturing project content. | European Union (EU data residency / ingest.de) | Yes. |
| Cloudflare, Inc. | DNS and email routing: manages the structiq.co domain and routes inbound email to our support addresses. | Domain DNS queries; inbound email metadata and contents routed to our support addresses; connection metadata such as IP addresses. | Global (Cloudflare's distributed network) | Yes. |
International data transfers
structIQ is operated from Switzerland and stores your project data within the European Union. Some sub-processors are located in or process data in the United States or globally. Where your data is transferred outside Switzerland or the European Economic Area, we put in place appropriate safeguards, such as the European Commission's Standard Contractual Clauses together with the Swiss addendum. You can request more information about these safeguards at privacy@structiq.co.
Questions
For any questions about our sub-processors or how we handle your data, contact us at privacy@structiq.co.