Subprocessors
Last updated: April 21, 2026
RiskWise (operated by JOOP LLC) uses the following third-party service providers ("subprocessors") to help us provide, maintain, and improve our services. Each subprocessor processes data only as necessary to perform its designated function. We review our subprocessors periodically and will update this page when changes occur.
| Subprocessor | Purpose | Data Processed | Location | Security Certifications |
|---|---|---|---|---|
| Supabase | Database hosting, authentication, and file storage | Account data, uploaded documents, analysis results | United States | SOC 2 Type II |
| Vercel | Application hosting and edge delivery | Web traffic, server-side rendering | United States | SOC 2 Type II |
| Anthropic (Claude API) | AI-powered contract analysis, risk assessment, and AskRW assistant | Uploaded contract text, insurance document text, user questions. Data is not used to train models under Anthropic API usage policy. | United States | SOC 2 Type II |
| OpenAI | Text embeddings for search and similarity features only | Document text for vector embedding generation. Data is not used to train models under OpenAI API data usage policy. | United States | SOC 2 Type II |
| Stripe | Payment processing and subscription billing | Payment method details, billing information | United States | PCI DSS Level 1 |
| Resend | Transactional email delivery | Email addresses, email content | United States | SOC 2 Type II |
| Telnyx | SMS message delivery | Phone numbers, SMS message content | United States | SOC 2 Type II |
| Cloudflare | DNS management and email routing | DNS queries, email routing metadata | United States | SOC 2 Type II, ISO 27001 |
| Upstash | Rate limiting and caching (Redis) | Request metadata (IP addresses, rate limit counters) | United States | SOC 2 Type II |
| Sentry | Error monitoring and performance tracking | Error logs, stack traces, browser metadata, IP addresses | United States | SOC 2 Type II |
If you have questions about our subprocessors or data processing practices, contact us at Hello@GetRiskWise.com. For enterprise customers requiring a Data Processing Agreement, see our DPA page.