Trust & data

Subprocessors

CraftAClause is built and hosted in the United States. Your account and policy data are stored on US-based infrastructure, and every third-party service we rely on processes that data within the United States.

Hosted in the United States

Who we share data with

To run the product we use a small number of third-party services, called subprocessors. Each one handles a specific, limited job — sending email or helping you draft and review policy text — and nothing more.

Subprocessor Purpose Data processed Location
Microsoft Azure (Azure Communication Services) Transactional and notification email (magic-link sign-in, review reminders). Recipient email address and the contents of the message sent. United States
OpenAI, L.L.C. AI drafting and review of policy content. The policy text and prompts you submit for generation or review. United States
Anthropic, PBC AI drafting and review of policy content. The policy text and prompts you submit for generation or review. United States
Google LLC (Google Gemini) AI drafting and review of policy content. The policy text and prompts you submit for generation or review. United States

The AI providers above are used for policy drafting and review. Depending on the request, one or more of them may process the text you submit; we do not sell your data or use it to train third-party models.

Changes to this list

We keep this page current. If we add or change a subprocessor, we'll update the table here. Questions about how we handle data? Get in touch through our contact form.

Last updated: August 2026.