Sub-Processors

Processes the text of an uploaded safety practice document to generate the AI-assisted compliance findings for an audit.

Data processed: The uploaded document's text content, for that specific audit only.

Processes subscription billing, and calculates and remits applicable sales tax/VAT on our behalf.

Data processed: Customer name, email, and billing/payment details — collected by Paddle directly at checkout, not stored on our servers.

Hosts the database that stores all application data.

Data processed: User accounts, client company records, audit findings, and uploaded documents.

Stores uploaded safety practice documents and generated audit reports.

Data processed: Uploaded document files and generated report files.

Sends the legal-acceptance record email (with your accepted Terms of Service, Privacy Policy, and DPA attached as a PDF) and advance-notice emails for material changes to legal terms or pricing.

Data processed: Recipient name and email address; the acceptance email's PDF attachment also contains the recipient's name, email, and acceptance timestamp.

Hosts and runs the application itself, serving every page and request.

Data processed: All data submitted through the application in transit, and standard request/traffic logs.