Sub-processors
Last updated: July 1, 2026
To provide LetterScript, we share limited data with the third-party service providers (“sub-processors”) listed below. Each one processes only what it needs to perform its function. This list supplements our Privacy Policy; if our sub-processors change, we will update this page.
| Sub-processor | Purpose | Data involved | Region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, encrypted document storage, database, and job queues | All application data, encrypted at rest and in transit | United States |
| Amazon Bedrock | AI processing — OCR, field extraction, classification, and chat over your documents | Document contents and chat messages (not used to train AI models) | United States |
| Amazon SES | Email delivery and inbound per-deal mailboxes | Sender/recipient email addresses, message contents, and attachments | United States |
| Resend | Transactional email delivery (invites, reminders, notifications) | Recipient email address and message contents | United States |
| Stripe | Billing and payments | Name, email, and billing details (card data is handled by Stripe; we never store it) | United States |
| Cloudflare | Bot protection (Turnstile) on sign-in and public forms | A challenge token and your IP address | Global |
| PostHog | Product analytics and (masked) session replay to diagnose and fix issues | An opaque user identifier and product-usage events; session recordings mask all text and inputs, and never include document contents | United States |
| Sentry | Application error monitoring | Error diagnostics (stack traces, page URL, browser info); configured not to send personal data or document contents | United States |
| Google / Microsoft / Apple | Sign-in (OAuth) | Email, name, and account identifier | United States |
| Termly | Hosting and rendering our legal policies | Loaded on our legal pages; may set its own cookies | United States |
| Follow Up Boss | CRM sync — only if you choose to connect it | Contact details you sync (names, emails, phone numbers, addresses) | United States |
| Calendly | Meeting scheduling — only if you choose to connect it | Invitee names, email addresses, and meeting details | United States |
| Google / Microsoft Calendar | Calendar sync of deal deadlines and meetings — only if you choose to connect it | Calendar event titles, times, and attendees | United States |
| SignWell | Document e-signature — only if you send a document for signature | Document contents and signer names and email addresses | United States |
Your documents are never used to train AI models — by us or our processing providers. Some integrations only receive data if you explicitly connect them. Questions about how your data is handled? Reach us through our contact page.