Service Providers and Subprocessors

This directory identifies the companies we use or may use to provide Hemingway and handle information for the purposes described in our Privacy Policy. Different features use different providers; listing a provider does not mean that every provider receives every customer's text.

A subprocessor is a provider we use to process personal information on a customer's behalf under our Data Processing Addendum. The DPA covers only the functions identified below as covered processing. A provider may also handle information for its own purposes or for Hemingway's independent business activities; listing it here does not make all of its work customer-directed processing.

Providers and their roles

Provider	What it does and information involved	Role under the DPA	Location information
Render Services, Inc.	Hosts our application, databases, workers, and analytics gateway. Handles account, organization, membership, subscription, and usage records, text transmitted for AI features, and technical logs.	Subprocessor for covered service hosting and processing.	Our main application, workers, and database are hosted in Ohio, United States. Our analytics gateway is hosted in Oregon, United States. Support and further processing by Render or its providers may occur in other countries.
OpenAI OpCo, LLC	Provides AI generation, analysis, classification, and structured results. Processes submitted text, context, prompts, instructions, output, and request/usage information needed to provide and secure those features.	Subprocessor for covered AI processing.	Processing may take place in the United States and other countries.
Google LLC	Provides AI generation, analysis, classification, and structured results. Processes submitted text, context, prompts, instructions, output, and request/usage information needed to provide and secure those features.	Subprocessor for covered AI processing. Google's separate Google Account service is described below.	Processing may take place in the United States and other countries where Google and its providers operate.
Anthropic — Anthropic, PBC	Provides AI generation, analysis, classification, and structured results. Processes submitted text, context, prompts, instructions, output, and request/usage information needed to provide and secure those features.	Subprocessor for covered AI processing.	Data is stored in the United States. AI processing may occur in the United States and selected countries in Europe, Asia, and Australia. Support and safety processing may occur where Anthropic and its affiliates operate.
Fireworks AI — Fireworks.ai, Inc.	Hosts AI generation, analysis, classification, and structured results. Processes submitted text, context, prompts, instructions, output, and request/usage information needed to provide and secure those features.	Subprocessor for covered AI processing.	Processing may take place in the United States and other countries where Fireworks and its providers operate.
Functional Software, Inc. (Sentry)	Helps us detect and investigate errors. Receives technical error reports and a Hemingway account ID, but not your email address or writing.	Subprocessor for error reporting used in covered service operations. Independent business uses, if any, are outside this designation.	Hemingway's Sentry data is stored in the United States. Support and further processing by Sentry or its providers may occur in other countries.
Mixpanel, Inc.	Provides optional product analytics, including feature use and the steps people take before subscribing. Receives permitted account-linked usage records, such as account and organization identifiers, plan, feature, timing, result, and token counts, but not writing or instructions.	Hemingway's own product and subscription analytics are outside the customer DPA. Subprocessor for customer-directed service diagnostics involving Covered Data. Use follows the product-analytics choice described in the Privacy Policy.	Hemingway's Mixpanel data is stored in the United States. Support and further processing by Mixpanel or its providers may occur in other countries.
Twilio Inc. — SendGrid	Sends login messages, invitations, service emails, and permitted marketing. Handles recipient and organization details, message contents, delivery results, and email preferences. We do not track email opens or clicks.	Subprocessor for authentication, invitations, and other communications used in covered processing. Independent marketing and business communications are outside this designation.	Processing may take place in the United States and other countries.
FrontApp, Inc.	Stores and manages support and billing correspondence, including contact details, conversations, attachments, and relevant account or technical information.	Subprocessor for customer-requested support involving covered processing. Independent business correspondence is outside this designation.	Primary storage may be in the United States or European Economic Area. Support and further processing by Front or its providers, including limited storage, may occur in other countries.
WorkOS, Inc.	Handles Hemingway sign-in, sessions, and account lifecycle, including email codes, Google sign-in, and configured organization SSO. Handles identity and contact details, user and organization identifiers, membership, sign-in and session records, and credentials or tokens needed for authentication.	Subprocessor for covered authentication and account processing.	Processing includes the United States. WorkOS and its providers may transfer information across countries.
Stripe	Processes subscriptions, payments, invoices, and related information, including fraud checks. Its own privacy notice covers its independent uses.	Hemingway's payment and billing administration is outside the customer DPA.	Processing may take place in the United States, India, and other countries where Stripe and its providers operate.
Google Account service	Verifies identity and provides basic account information when you choose Google sign-in. Google's own privacy terms apply to its account service.	Customer-chosen identity service; separate from Google's covered AI processing.	Processing may take place around the world, including outside the country where you live.
Cloudflare, Inc. — Turnstile	Uses browser and security information on relevant pages to detect automated abuse.	Website security and abuse prevention.	Processing may take place in the United States, the European Economic Area, and other countries where Cloudflare and its providers operate.
Plausible Insights OÜ — Plausible Analytics	Measures website visits and traffic sources without analytics cookies or persistent visitor identifiers.	Independent website measurement; not listed as a customer subprocessor for that function.	Website visitor data is processed and stored in the European Union.
Rewardful Inc.	Tracks referrals when you allow affiliate attribution and manages commission records. Handles referral identifiers and relevant customer or affiliate information.	Independent referral and affiliate administration; not listed as a customer subprocessor for those functions.	Service data is hosted in the United States. Support and further processing by Rewardful or its providers may occur in other countries.
Google Workspace	Handles support and business email, appointments, and related contact or meeting information. It also serves embedded legal documents where used. Correspondence can include text or attachments you send us.	Subprocessor for customer-requested support involving covered processing. Independent business communications and administration are outside this designation.	Processing may take place in the United States and other countries where Google and its providers maintain facilities.

The covered roles apply to the web application and Word add-in wherever the provider supports that feature. Information sent for those functions remains subject to the applicable content-use, confidentiality, and security protections. We remain responsible for our subprocessor obligations under the DPA.

Retention rules, including provider copies of AI requests and retained business correspondence, are explained in the Retention Schedule. The directory does not promise that every provider copy stays in the United States or is deleted immediately after processing.

Changes and objections

Adding or replacing a covered subprocessor outside your accepted authorization follows the DPA's 30-calendar-day advance notice and 15-calendar-day objection process. The same process applies to materially different processing outside an existing provider's authorized purposes, data categories, or disclosed locations. A later webpage edit alone does not add a provider to an existing customer's authorization. The DPA governs the notice, objection, and resolution process; other protection and transfer duties still apply.

Contact support@hemingwayapp.com about this directory or a subprocessor notice.