Legal
Subprocessors
This list is maintained by hand and reflects the services in use today. It is published so you can review it before you buy, and so a change is something you can notice rather than discover. The legal framework around it — authorisation, notice of changes, transfer safeguards — is still pending; see the DPA scaffold.
- Maintained by hand
- Reflects the services in use today
Infrastructure
Everything CitePatch stores lives here. Regions are europe-west1 unless stated otherwise.
- Google Cloud Platform (Google Ireland Ltd.) — application hosting, PostgreSQL database, object storage for exports and evidence, message queue, secret storage, logs
- DigitalOcean — the virtual machines that serve the public site and the application front ends
- Google Analytics and Google Tag Manager (Google Ireland Ltd.) — audience measurement on the public marketing site only, and only after a visitor consents. Never used inside the product.
Payments and email
Card details are never seen by CitePatch: checkout and the billing portal are hosted by Stripe.
- Stripe — subscriptions, checkout, invoices and the customer billing portal
- Resend — transactional email: sign-in links, invitations and account notifications
Model and search providers
These receive the prompts being measured and the content being drafted. They do not receive your account data, and CitePatch does not permit training on customer content.
- OpenAI — answer measurement and content drafting
- Anthropic — answer measurement, including web-search answers
- Perplexity — answer measurement
- Google (Gemini, via Google Ireland Ltd.) — answer measurement and content drafting
- DeepInfra — open-weight model inference for drafting and extraction
- Groq — open-weight model inference for drafting and extraction
- SerpAPI — search engine results used as evidence alongside AI answers
- DataForSEO — search engine and keyword data used as evidence alongside AI answers
Not subprocessors
Integrations you connect — GitHub, GitLab, Bitbucket, WordPress, Webflow, Shopify, Contentful, Wix, Google Drive — act on your instruction, with credentials you supply and can revoke. CitePatch writes to them only when you publish a patch.