Last updated: July 15, 2026
A sub-processor is a third party we engage to process data on our behalf in order to deliver ForthWrite. Every sub-processor below is bound by its own security and confidentiality commitments, receives only the data it needs to perform its function, and is never permitted to use your data for its own purposes (such as training its own general-purpose models on your content). See our Privacy Policy for the full detail on what we collect and why.
| Name | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, and scheduled (cron) jobs | Application requests and server logs; no message content is persisted at this layer | United States (global edge network) |
| Supabase, Inc. (infrastructure hosted on AWS) | Primary database and authentication | Account data, encrypted OAuth/API tokens, and voice-matching snippets (email, LinkedIn, and Slack message text you opt into capturing) | United States (AWS) |
| Stripe, Inc. | Payment processing and billing | Payment method and billing information; never touches our own servers | United States |
| Anthropic, PBC | AI draft generation (primary model) | Thread or message content sent transiently at draft time; not retained by us after the response returns | United States |
| OpenAI, L.L.C. | AI draft generation (Free-tier proxy) and voice-dictation transcription (Whisper) | Thread or message content, and/or microphone audio, both transient | United States |
| Other BYOK AI providers you connect (e.g. Google, xAI, Mistral) | AI draft generation, only when you configure your own API key for that provider | Thread or message content, transient, subject to that provider's own policies | Varies by provider |
| Sentry (Functional Software, Inc.) | Error monitoring and observability | Scrubbed error and crash diagnostics; message and thread content is never sent to Sentry | United States |
| PostHog, Inc. | Product analytics | Anonymous, aggregate usage events; no message or thread content | United States |
| Resend | Transactional email delivery | Your account email address and the content of transactional notifications we send you (e.g. billing, product updates); never your drafts or message content | United States |
Gmail, Outlook, Slack, and LinkedIn are the source platforms you explicitly authorize ForthWrite to read from, you already have your own direct relationship and agreement with each of them, so we do not list them as sub-processors above. When you connect one of these platforms, ForthWrite reads only the specific thread, message, or channel history needed to draft a reply, on demand, using your own authorization. If you opt in to voice-matching capture (on by default, and revocable at any time), a snippet of what you send is retained on the same rolling window described in our Privacy Policy, regardless of which platform it came from.
If we add a new sub-processor with access to your message content, we will update this page and bump the “Last updated” date above. For material changes, we will also note it in our product update channels. Contact us at support@forthwrite.ai with any questions about a specific sub-processor.