Subprocessors
Last updated July 13, 2026
Epitaph LLC engages the third-party service providers below to help operate Scribe. Each is bound by contractual obligations to protect personal data and to process it only as needed to provide its service to us. All are located in the United States; Scribe is a U.S.-only service.
Current subprocessors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, and file/attachment storage | Account data, injury/illness records, case files, uploaded photos & attachments | United States |
| Vercel, Inc. | Application hosting and content delivery | Request metadata, IP addresses (transient) | United States |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact, payment-method data (held by Stripe), plan & seat counts | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery (invitations, password resets, alert digests) | Recipient email address, message content (no injury details) | United States |
| Functional Software, Inc. (Sentry) | Error monitoring and diagnostics | Error events, technical/request metadata | United States |
| Anthropic, PBC | AI-assisted safety summaries — engaged only when an organization on a plan with AI features generates a summary. The payload is aggregated/de-identified safety metrics; individual injury PII is not sent. | Aggregated, PII-walled safety statistics submitted for summary generation | United States |
Changes to this list
We may add or replace subprocessors as the Service evolves. When we do, we will update this page. If your agreement with us entitles you to advance notice of new subprocessors, we will provide it as described in that agreement so you have an opportunity to object.
Questions
To request a Data Processing Addendum or ask about a specific subprocessor, contact us at privacy@epitaph.llc.