legal · subprocessors

Subprocessors

Every third party that processes personal data for Shorward, what it does and where. We give 30 days' notice before adding one.

Last updated 28 September 2026

ProviderPurposeDataLocation
Cloudflare, Inc.Website hosting, content delivery, security, and storage of waitlist sign-ups and application dataWaitlist and account details, technical logsGlobal network, including the United States
Anthropic, PBCAI processing to check evidence and write reportsScan results and uploaded evidence sent for a specific taskUnited States

We will add our email delivery and payment providers here, with 30 days' notice, before accounts and paid plans open.

Get notified of changes

Email [email protected] with the subject "Subprocessor updates", and we'll tell you at least 30 days before a new subprocessor starts processing Customer Personal Data. You can object as set out in the DPA.

What isn't a subprocessor

We don't use advertising networks, analytics or tracking tools, or third-party font or script hosts on this site.