01Infrastructure
| Subprocessor | Purpose | Location | Content processed |
|---|---|---|---|
| Amazon Web Services | Primary compute, storage and networking | us-east-1, ap-south-1 | All customer content, encrypted at rest |
| Cloudflare | CDN, DDoS protection and WAF | Global edge | Request metadata; no document content at rest |
02Application services
| Subprocessor | Purpose | Location | Content processed |
|---|---|---|---|
| Anthropic | Model inference for classification and drafting, under a zero-retention enterprise agreement | United States | Document text during inference only; no retention, no training |
| Sentry | Error monitoring | United States | Stack traces and request metadata; document content scrubbed before transmission |
| Datadog | Infrastructure and application monitoring | United States, EU | Operational metrics and logs; no document content |
03Business operations
| Subprocessor | Purpose | Location | Content processed |
|---|---|---|---|
| Stripe | Payment processing | United States | Billing contact and payment details; no document content |
| Postmark | Transactional email delivery | United States | Account email addresses and notification content |
| Intercom | Customer support messaging | United States, EU | Support conversation content and account metadata |
| Google Workspace | Internal email, documents and calendaring | United States | Business correspondence; customer documents are never stored here |
04How inference is handled
Document text is transmitted to our model provider only during inference, under an enterprise agreement carrying zero data retention and contractual exclusion from training. No document is stored by the provider, no content is retained after the response, and no cross-tenant context is ever assembled.
Deterministic operations — pagination, Bates numbering, index generation, page-range calculation and form field comparison — run entirely within our own infrastructure and involve no third-party inference at all.
05Notice of changes
We publish changes to this list and notify account administrators by email at least thirty days before a new subprocessor begins processing customer content. Customers may object on reasonable data protection grounds within that period under section 5 of the DPA.
To receive change notifications without an active account, write to privacy@docketbuild.com and ask to be added to the subprocessor notice list.
Contact
Docket Build, Inc., Plot No. 5, Road No. 5, Mahindra Hills East Marredpally, Nehrunagar, Hyderabad, Secunderabad, Telangana, 500026, India. Email privacy@docketbuild.com, telephone +91 (080) 4123-7700.