Sub-processors
These are the services that handle data so we can run What's Wrong. The list and its order are the same as in the privacy policy. We send each one only what it needs to run its part of the service, under that provider's own terms. What a provider may do with what it receives differs: the training terms of each AI provider, including the one whose policy allows inputs to be used to improve its models, are on Where your text goes when a model is used. A provider marked "when your workspace allows it" or "when you connect it" receives nothing from a workspace that has not chosen it.
Where the region reads "see the provider's terms", we have not confirmed a processing region with that provider and would rather say so than guess. "At launch" means the provider was already on the privacy policy when the service opened to customers in September 2026.
| Provider | Purpose | Data | Region | Since |
|---|---|---|---|---|
| Railway | Hosting for the application and its data | Everything the service stores | EU (Netherlands) | At launch |
| Resend | Transactional email: invitations, password resets, contact messages | Recipient address and the message we send | See the provider's terms | At launch |
| Sentry | Error tracking | The error, where in the service it happened and a pseudonymous id; never your files, text, findings or reports | See the provider's terms | 5 Oct 2026 |
| PostHog | Product analytics | Usage events with a pseudonymous id; never your content | EU | 5 Oct 2026 |
| Cloudflare Turnstile | Checks that a person, not a script, is signing up | Your browser and IP address on the sign-up form; not your files | See the provider's terms | 2 Oct 2026 |
| Cloudflare Web Analytics | Page-view counts for the marketing site, the sign-up page and the sign-in page, without cookies | Page address, browser and IP address; never inside the signed-in app | See the provider's terms | 5 Oct 2026 |
| Google Analytics | Page-view counts for the marketing site and the sign-up page, with consent set to denied | Page address, browser and an anonymised IP address; never inside the signed-in app | See the provider's terms | 20 Oct 2026 |
| Cloudflare Email Routing | Forwards the email you send to a profile's QA address, when your workspace uses QA by email | The message in transit; its delivery log keeps the sender and recipient addresses | See the provider's terms | 13 Oct 2026 |
| Cloudflare R2 | Object storage for a second copy of each report's files, mirrored as the report is saved | The report files, and the seed archive of our own demo workspace, which has no customer data | EU jurisdiction (Cloudflare) | 6 Oct 2026 |
| Stripe | Payments and subscriptions | Billing email, country, company VAT number and invoices; card details stay with Stripe | See the provider's terms | 1 Oct 2026 |
| Google Gemini | The AI review, the AI check of rule findings and the second opinion, when your workspace allows it | Segment text and its context; the segments of one file when the whole-file review is on (what is sent) | Global (Google) | At launch |
| OpenAI | The AI review, the AI check of rule findings and the second opinion, when your workspace allows it | Segment text and its context; the segments of one file when the whole-file review is on | United States | At launch |
| DeepInfra | The AI review, the AI check of rule findings and the second opinion on open models, when your workspace allows it | Segment text and its context; the segments of one file when the whole-file review is on | United States | At launch |
| DeepSeek | The AI review, the AI check of rule findings and the second opinion, only if your workspace allows it | Segment text and its context; the segments of one file when the whole-file review is on | China | At launch |
| DeepL | Machine translation in Eval, only if your workspace enables it | The source text of an Eval run | See the provider's terms | At launch |
| Google Translate | Machine translation in Eval, only if your workspace enables it | The source text of an Eval run | See the provider's terms | At launch |
| Microsoft Translator | Machine translation in Eval, only if your workspace enables it | The source text of an Eval run | See the provider's terms | At launch |
| Sign-in, only if you choose to sign in with Google | Your Google account's email address and whether Google has verified it | See the provider's terms | At launch | |
| Crowdin | When you connect it: we read the strings you check and post findings back as comments | The strings of the project you connect | See the provider's terms | At launch |
| Smartling | When you connect it: we read the jobs you check and post findings back as issues | The jobs you check | See the provider's terms | At launch |
| Phrase | When you use the browser extension in Phrase, it reads the job you have open in your own session | The job you have open | See the provider's terms | At launch |
| Dropbox | When you connect a folder: we read the files you drop there and write the reports back | The files in the folder you choose; an encrypted refresh token until you disconnect | See the provider's terms | At launch |
The Cloudflare R2 row is the report mirror: as each report is saved, its files are copied to object storage at Cloudflare in its EU jurisdiction, so a report survives the loss of our main volume (Backups, recovery and continuity).
The training terms of the AI providers are on Where your text goes when a model is used.
Changes to this list
We tell existing customers of a change to this list by email at least 30 days before it takes effect, and you have the right to object to the change in that time.