Sub-processors
Last updated: July 21, 2026
OpenDD uses a small number of trusted third-party providers ("sub-processors") to deliver its service. This page lists them, what each does, the data it may process, and where. It forms part of our Data Processing Agreement. We keep the set deliberately minimal — OpenDD collects very little personal data (essentially your account email, and, in future, a phone number), payment details go straight to Stripe, and the only substantial content we process is what you choose to upload.
| Sub-processor | Purpose | Data processed | Location | Terms |
|---|---|---|---|---|
| Anthropic (Claude API) | AI analysis of documents and text you submit (e.g. trust-page and document scoring, license and filing analysis). | The content of documents and search inputs you choose to submit, which may contain personal data. | United States (SCCs; EU-US Data Privacy Framework certified). Does not train models on submitted data; short default retention. | Terms · Privacy |
| CourtListener (Free Law Project) | Live federal court-records search (patent, trademark and counterfeit litigation) used by the IP & ITC and Customs risk modules. | The search terms you enter (company or individual names), which may include personal data. No account data or uploaded documents are sent. | United States. | Terms · Privacy |
| Stripe | Payment processing for credit purchases and subscriptions. | Payment card data and billing details (collected and processed directly by Stripe; not stored by OpenDD). | United States / global (SCCs). | DPA · Privacy |
| Render | Cloud hosting and infrastructure for the OpenDD application and database. Maintains SOC 2 Type II and ISO 27001 certifications. | All service data at rest and in transit, including account email and uploaded documents. | United States (SCCs). | DPA · Privacy |
| Email delivery provider | Sending transactional email (account verification, security and service notices) and, where opted in, marketing email. | Account email address and message content. | United States / EU (SCCs). | Provider terms apply; current provider available on request. |
We will give reasonable prior notice before adding or replacing a sub-processor. To be notified of changes, or to raise a data-protection objection, contact us through our Contact page. This list is provided for transparency and is not legal advice.