Subprocessors

Effective date
October 7, 2026
Applies to
Services that handle customer data
Contact
hello@takepublic.com
Version
Current

These organizations process data or provide infrastructure used to operate the Service. Under section 9 of the Terms of service, TakePublic keeps this list current and will notify account owners before a new subprocessor processes Customer Data.

Current subprocessors

A provider processes data only for the stated purpose and only when the related feature is used, where noted.

  • Google Cloud: application hosting, database, file storage, and Google Cloud Identity Platform authentication.
  • Google Analytics: consent-governed usage analytics for the marketing site, the scanner, and the application's onboarding flow.
  • Sentry (Functional Software, Inc.): application error monitoring; receives error reports, stack traces, and pseudonymous internal account and workspace identifiers, which are random IDs, never names, email addresses, filing content, or session recordings.
  • Cloudflare: website and application delivery, the status page and its email subscriptions, and offsite backup storage of filing artifacts and of the contact details (names, email addresses and phone numbers) used to reach customers with a filing due during an outage.
  • Anthropic: reading a broker confirmation, grant notice, statement or description your company drops or pastes to record an insider's transaction or holdings, AI drafting, filing chat, document explanations, and support chat when OpenAI is unavailable (including images and PDFs you attach in the help chat, once they are checked for viruses), when your company uses them; the same Anthropic models may be served through Google Cloud's Vertex AI when Anthropic is unavailable.
  • OpenAI: the support chat assistant (your question, a snapshot of your account's filings, deadlines and plan, and images and PDFs you attach in the help chat, once they are checked for viruses), filing chat when Anthropic is unavailable, and text embeddings for retrieval, when enabled.
  • Stripe: payment processing.
  • Postmark: transactional and alert email.
  • Twilio: text messages: one-time codes on signing, sign-off and response pages; notices that a request was emailed, or that a company replaced their mobile number while a request for their signature was open, to people who opt in on a request's page; and deadline alerts and service status updates to people who opt in.
  • Slack: internal operational alerts about the Service, which can include the recipient email address of a failed delivery.
  • Cursor (Anysphere, Inc.): AI-assisted software development; may process production logs and data visible in development sessions, in the United States.

Connected services and government systems

These are not subprocessors. Your company connects or files to them at its own direction, under its own agreements with them, and they send data to us or receive it from us rather than processing it on our behalf.

  • Intuit (QuickBooks Online): sends us your accounting data, only when your company connects it.
  • Google Sheets: sends us spreadsheet data, only when your company imports a sheet or connects Google.
  • SEC EDGAR: receives the filings your company submits, which become public government records.

Change log

October 7, 2026: the OpenAI and Anthropic entries also name the images and PDFs a person attaches in the help chat, which the support chat assistant reads once they are checked for viruses.

October 6, 2026: added Cursor (Anysphere, Inc.) for AI-assisted software development; it may process production logs and data visible in development sessions, in the United States.

September 29, 2026: corrected the Cloudflare entry, which named offsite storage of filing artifacts only; Cloudflare also runs the status page and its email subscriptions, and the offsite copy holds the names, email addresses and phone numbers used to reach customers with a filing due during an outage. Expanded the Anthropic entry to reading a document or description a company drops or pastes to record an insider's transaction or holdings.

September 26, 2026: the Twilio entry also names the text to a mobile number a company replaces while a request for that person's signature is open, sent only to people who opted in on a request's page.

September 25, 2026: corrected the Twilio entry, which named deadline alerts only; Twilio also sends service status texts to people who turn them on, one-time codes on signing, sign-off and response pages, and notices that a request was emailed, to people who opt in on the request's page.

September 19, 2026: corrected the OpenAI entry, which named text embeddings only; OpenAI also serves the support chat assistant (the question and an account snapshot) and filing chat when Anthropic is unavailable. Expanded the Anthropic entry to filing chat, document explanations and support chat when OpenAI is unavailable, and to note that Anthropic models may be served through Google Cloud's Vertex AI.

August 17, 2026: expanded the Sentry entry to cover the pseudonymous internal account and workspace identifiers attached to error reports.

August 14, 2026: moved Intuit (QuickBooks Online), Google Sheets, and SEC EDGAR to a new connected services section; they are customer-directed connections, not subprocessors.

August 13, 2026: expanded the Cloudflare entry to cover offsite backup storage of filing artifacts.

August 12, 2026: initial publication; added Google Sheets and Slack to the published list.

Questions? Contact hello@takepublic.com.