Legal

Sub-processors

Last updated: June 2026

To deliver Softbooq, we engage a small number of third-party sub-processors. Each is bound by a Data Processing Agreement and may process personal data only on our documented instructions, in line with GDPR Article 28. Your business remains the data controller; Softbooq is the processor.

AI providers

Softbooq AI uses these providers for retrieval and inference only. Your data is never used to train any AI model. Relevant text is read to answer a single request and then discarded; their API terms contractually exclude training on inputs. AI processing of your workspace data happens only when an administrator turns on the AI Data Context setting, and document reading is limited to the files you place in the AI Knowledge folder.

Anthropic, PBC (Claude)

AI assistant inference (Softbooq AI - Advanced tier, AI app, Files assistant) · United States

The user’s question plus the relevant context placed in the prompt at request time (which may include record summaries and passages from documents the customer has placed in the AI Knowledge folder). Read to answer one request, then discarded.

Anthropic Commercial Terms

Google LLC (Gemini)

Embeddings, fast-tier chat, and optional OCR for scanned documents · United States

Record and document text sent for indexing; fast-tier chat messages; scanned-document images when cloud OCR is enabled. Processed transiently.

Gemini API Terms

Platform infrastructure

Supabase

Managed database, authentication, and file storage · Customer’s configured region

All workspace data Softbooq stores on the customer’s behalf.

Cloudflare

Application hosting and content delivery (CDN) · Global edge network

Request metadata (IP addresses, request logs) needed to serve the application.

Stripe

Subscription billing and payment processing · United States / EU

Billing contact and payment details for Softbooq subscriptions.

Integrations you enable

When your administrators connect a third-party integration (an accounting tool, CRM, cloud drive, calendar, and so on), that provider becomes an additional sub-processor for the data you choose to sync with it. These are optional and specific to your configuration. The full data-flow record for each integration is available on request and referenced in your Data Processing Agreement.

Changes to this list

We keep this page current as our sub-processors change. For questions, or to request notification of changes, contact [email protected]. See also our Privacy Policy.