Subprocessor List
Updated September 18, 2026
This page lists the third-party subprocessors GC AI uses to process Customer Data.
ZERO DATA RETENTION SUBPROCESSORS
These subprocessors process Customer Content on a zero data retention basis. No customer data is stored after processing is complete.
| Subprocessor Name | Purpose | Data Types | Data Hosting Location |
|---|---|---|---|
| OpenAI | AI service provider | Customer Content processed by AI models for generating outputs; no data retained after processing | USA |
| Anthropic (Provided Claude Fable 5 and newer models are not enabled on your account) | AI service provider | Customer Content processed by AI models for generating outputs; no data retained after processing. Applicable when Claude Fable 5 and newer models are not enabled on your account | USA |
| Reducto | AI service provider | Customer Content processed for document parsing and extraction; no data retained after processing | USA |
| Cohere | AI service provider | Customer Content processed for embeddings and search; no data retained after processing | USA |
| AI service provider | Customer Content processed by AI models for generating outputs; no data retained after processing | USA | |
| xAI | AI service provider | Customer Content processed by AI models for generating outputs; no data retained after processing | USA |
ALL OTHER SUBPROCESSORS
| Subprocessor Name | Purpose | Data Types | Data Hosting Location |
|---|---|---|---|
| Google Cloud | Cloud infrastructure | Customer Content and account data hosted on cloud infrastructure | USA |
| WorkOS | Authentication | Account credentials, SSO configuration, and user identity data | USA |
| HubSpot | CRM service provider | Business contact information and customer relationship data | USA |
| Vercel | Cloud infrastructure | Application hosting and delivery; may process request metadata | USA |
| Sentry | Application monitoring | Application error logs and performance data; may include de-identified usage metadata | USA |
| PostHog | Product analytics | De-identified product usage and interaction data | USA |
| Resend | Transactional emails | Email addresses and transactional email content | USA |
| Turbopuffer | Cloud infrastructure | Vector embeddings and search index data derived from Customer Content | USA |
| Intercom | Customer support platform | Support messages, user contact information, and conversation history | USA |
| Hex | Data analytics | Aggregated and de-identified business analytics data | USA |
| Raindrop | AI operational observability infrastructure | AI model performance metrics and operational telemetry; may include de-identified request metadata | USA |
| Midpage AI | Legal research data and search technology provider | Structured search queries, case citations, and opinion analysis requests transmitted via API; case law content and metadata returned to the platform | USA |
| Nango | Authenticator for API connectors | External email, chats and files transmitted via agent connectors used within the platform | USA |
| Cloudflare | Network security, traffic routing, and content delivery | IP addresses, user-agent and routing metadata, usage logs, and encrypted customer content in transit | USA |
| Moonlit | Legal research data and search technology provider | Structured search queries, legal citations, and analysis requests transmitted via API; case law, legislation, and related legal content and metadata returned to the platform | USA |