Sub-Processors
Last updated: March 14, 2026
Scribora AI uses the following third-party sub-processors to deliver our service. Each sub-processor is bound by data processing agreements ensuring GDPR-compliant handling of your data.
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Clerk | Authentication & identity | Email, name, login credentials | United States |
| Anthropic | AI content generation (Claude) | Project data, prompts | United States |
| OpenAI | AI content & image generation | Project data, prompts, image requests | United States |
| Paddle | Payment processing (Merchant of Record) | Email, billing info, transactions | United Kingdom |
| Fly.io | Application hosting & database | All platform data (encrypted at rest) | United States / EU |
| Cloudflare | CDN, R2 object storage | Uploaded images, landing pages | Global (EU included) |
| Vercel | Frontend hosting & CDN | IP address, request metadata | United States / Global |
| Upstash | Redis (task queue) | Temporary job metadata | United States / EU |
Data Transfer Safeguards
For sub-processors based outside the European Economic Area (EEA), we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- EU-US Data Privacy Framework where the sub-processor is certified
- Supplementary measures including encryption in transit and at rest
Changes to Sub-Processors
We will update this page when we add or remove sub-processors. If you have subscribed to our service, we will notify you of significant changes at least 15 days in advance, giving you the opportunity to object.
Contact
For questions about our sub-processors or to request copies of our Data Processing Agreements, contact us at [email protected].