legal /subprocessors Subprocessors
Last updated: March 23rd, 2026
Infrastructure & Hosting
| Subprocessor | Purpose |
|---|---|
| Cloudflare | Object storage (R2), edge compute (Workers, Durable Objects, KV), static hosting (Pages) |
| MongoDB | Primary application database |
| Fly.io | Application hosting and compute |
| Redis | Caching and real-time pub/sub |
Authentication
| Subprocessor | Purpose |
|---|---|
| WorkOS | User authentication, SSO, and session management |
Payments
| Subprocessor | Purpose |
|---|---|
| Stripe | Billing, subscriptions, and payment processing |
Analytics & Monitoring
| Subprocessor | Purpose |
|---|---|
| PostHog | Product analytics and usage tracking |
| Sentry | Error tracking and performance monitoring |
Communications
| Subprocessor | Purpose |
|---|---|
| Resend | Transactional email delivery |
| Plain | Customer support and feedback management |
AI & Machine Learning
| Subprocessor | Purpose |
|---|---|
| Anthropic | AI-powered features |
| OpenAI | AI-powered features |
| Google Gemini | AI-powered design generation |
| Replicate | AI image generation |
Desktop Distribution
| Subprocessor | Purpose |
|---|---|
| ToDesktop | Desktop app packaging, updates, and distribution |
Corporate Tools
| Subprocessor | Purpose |
|---|---|
| Google Workspace | Email, document storage, and internal collaboration |
| Slack | Internal team communication and incident response |
| Linear | Issue tracking and project management |
| Notion | Internal documentation and knowledge base |
CI/CD & Development
| Subprocessor | Purpose |
|---|---|
| GitHub | Source control, CI/CD pipelines (Actions) |
If you have questions about our subprocessors or data processing practices, contact us at operations@paper.design.