Subprocessors
Last updated: September 22, 2026
Proserus, Inc. uses the third-party vendors below to host or process customer data in providing Proserus Legal. Each is bound by written terms that restrict its use of the data to providing its service to us, and each is covered by the Data Processing Addendum. All processing takes place in the United States.
1. Subprocessors
| Vendor | Purpose | Data categories | Location |
|---|---|---|---|
| Railway Corporation | Application hosting, PostgreSQL database, background job and OCR services | All structured practice data, AI records, document text passages and embeddings, audit logs, account and billing identifiers | United States |
| Microsoft Corporation (Azure) | Azure Files storage for litigation archives; Azure Communication Services for SMS; Azure Maps address autocomplete; Azure OpenAI when a firm brings its own Azure deployment | Archived document copies; phone numbers and message content; partial addresses typed into address fields; AI request content for firms using Azure OpenAI | United States |
| Anthropic, PBC | Large language model inference for AI features | Prompt content for the specific request (document excerpts, matter context, user instructions) and model output; no training on customer content | United States |
| OpenAI, L.L.C. | Large language model inference and text embeddings for AI features and document search | Prompt content for the specific request and document text passages for embedding; no training on customer content | United States |
| Stripe, Inc. | Subscription billing for firms; card and bank payment processing for client invoice payments | Firm billing contact and payment method; client payer name, payment method, amount, and invoice reference | United States |
| Dropbox, Inc. (Dropbox Sign) | Electronic signature of engagement letters and other documents a firm sends for signature (only when the firm uses e-signature) | The document sent for signature, signer names and email addresses, signing events and the executed copy | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring (only when enabled) | Error stack traces, request URL and method, tenant and user identifiers; request bodies, cookies, email addresses, and document content are excluded | United States |
AI requests are routed to Anthropic or OpenAI according to the task and the firm's configuration. A firm that brings its own provider key contracts directly with that provider, and the provider then acts on the firm's instructions rather than as a Proserus subprocessor.
2. Customer-Directed Services (Not Subprocessors)
The following services are contracted by the firm directly. Proserus accesses them on the firm's behalf with the firm's consent, and the firm's own agreement with the vendor governs the data held there.
| Service | How Proserus uses it | Data categories |
|---|---|---|
| Microsoft 365 / Microsoft Graph (firm's own tenant) | Sign-in via Entra ID; document storage in SharePoint; email sent from firm mailboxes; Teams and calendar integration | User identity; documents; email and calendar items the firm chooses to sync |
| Firm-supplied AI provider accounts (Anthropic, OpenAI, or Azure OpenAI) | Model inference using the firm's own credentials when the firm enables bring-your-own-key | Prompt content and model output for the firm's requests |
3. Changes to This List
Before adding a new subprocessor or materially changing how an existing one processes customer data, we will update this page and notify firm administrators by email at least 30 days in advance. A firm that objects on reasonable data-protection grounds may raise the objection with us during that period; if we cannot address it, the firm may terminate the affected service and receive a pro-rated refund of prepaid fees for the remainder of the term, as set out in the Data Processing Addendum. Removals and vendor name changes may be made without notice.
To be notified of changes, email privacy@proserus.com with the subject “Subprocessor notifications”.