Legal
Subprocessors.
Last updated: 2026-06-12
Scoper uses a small number of third-party providers to deliver the service. This page lists each one, what it does for us, what data it receives, and where it operates. We do not sell your data, and no provider is permitted to use your documents to train AI models.
| Provider | Purpose | Data it receives | Location |
|---|---|---|---|
| Supabase | Database, authentication, and document storage | Your documents and account data, encrypted at rest | Sydney, Australia |
| Vercel | Application hosting | Data in transit and operational logs | Sydney, Australia (compute); Vercel Inc. is US-based |
| Anthropic | AI analysis of your compliance documents | Excerpts of your documents, inside analysis requests. Not used to train AI models | United States |
| Voyage AI | Document indexing for retrieval (embeddings) | Text of your documents. Not stored after processing, and not used to train AI models | United States |
| Resend | Transactional email (invitations, notifications) | Recipient email addresses and message content | United States |
| Google Drive connector — only when you connect it | Scoper reads the files you pick from your Drive; Google receives only the API requests needed to do so | United States |
Marketing site only
Separately from the product, the scoper.io marketing site uses Plausible (privacy-friendly analytics — no cookies, no personal identifiers, EU-hosted) and Calendly (demo bookings — name and email you provide when booking).
Changes
We update this page when we add or remove a provider. For questions, or to be notified of changes, email hello@scoper.io. See also our privacy notice.