FillTrust

Legal

Sub-processors

Every third party that processes customer data on our behalf, what each one receives, and where it processes it. Any addition is published here at least 30 days before it starts processing.

Last updated 30 August 2026

Sub-processorPurposeData processedRegion
Google Cloud PlatformApplication hosting and document storageUploaded documents, questionnaires, generated answerseurope-west9 (Paris)
NeonManaged PostgreSQL databaseAccount details, answers, document text and embeddingsAWS eu-central-1 (Frankfurt)
Google (Gemini API)Generating questionnaire answersQuestion text and the retrieved excerpts used to answer itUnited States
AnthropicFallback answer generation (configurable, not currently in use)Question text and the retrieved excerpts used to answer itUnited States
OpenAIText embeddings for retrievalDocument excerpts and question textUnited States
StripePayment processingBilling details, email addressUnited States
ResendTransactional emailEmail addresses, notification contentUnited States
Google AnalyticsCounting visits to public pages, for visitors who consentPage address with single-use tokens removed, IP address, user agentUnited States (EU-US Data Privacy Framework)
CloudflareDNS, CDN and DDoS protectionRequest metadata (IP address, user agent)Global edge network

International transfers

Your documents are stored in the EU: object storage in Paris, database in Frankfurt. To answer a question, the relevant excerpts, not the whole document, are sent to Google and OpenAI in the United States. Those transfers rely on Standard Contractual Clauses. Neither provider trains models on data submitted through their APIs.

If EU-only processing is a requirement for you, get in touch before uploading anything.

See also our Data Processing Agreement, Privacy Policy and security overview.