Sub-processors
| Sub-processor | Purpose | Region / notes |
|---|---|---|
| Amazon Web Services (AWS) | Primary infrastructure — RDS, S3, EC2, KMS | ca-central-1 (Montréal), ca-west-1 (Calgary) |
| Anthropic | AI extraction provider (Claude) — optional | US (PII redacted before transfer); disabled in strict_canada mode |
| OpenAI | AI extraction provider (GPT-4o) — optional | US (PII redacted before transfer); disabled in strict_canada mode |
| Google Cloud (Vertex AI) | AI extraction provider (Gemini) — optional | Montréal (northamerica-northeast1) when strict mode enabled |
| Microsoft Azure (OpenAI service) | AI extraction provider (GPT-4o on Azure) — optional | Canada East |
| Stripe | Subscription billing and payment processing | US — billing metadata only, no document content |
| Postmark | Transactional email (verification, notifications) | US — email addresses and message content only |
| Cloudflare | DNS, WAF, and Turnstile CAPTCHA | Global edge — TLS-terminated traffic only |
| Sentry | Application error monitoring | EU — scrubbed of customer document content |
Notice of changes
Customers who subscribe to sub-processor change notifications receive 30 days' advance email notice before any new sub-processor is engaged to process customer document content. Customers may object during the notice period; if Folio AI cannot offer a reasonable alternative, the customer may terminate the affected service component without penalty.
strict_canada mode
Customers who enable strict_canada mode use only Canadian-region sub-processors. AI inference is restricted to Vertex Montréal, Azure Canada East, or on-premise Ollama. Stripe and Postmark are still used for billing and email but never receive document content.