Subprocessors
Who processes account data for us, and what the software contacts on its own.
This list does not include your documents — they are never uploaded, so no processor here ever sees one. It covers only the account, session, and audit data described in our
privacy policy.
Companies that process account data
| Company | What it does for us | Location |
|---|
| Railway | Runs the sign-in service and the website | United States |
| Neon | Hosts the database, on Amazon Web Services | us-west-2 (United States) |
| Resend | Delivers transactional email — sign-in codes and invitations | United States |
| Cloudflare | Provides DNS for our domains | Anycast (global) |
Services the software contacts
These are not subprocessors of account data — they never receive an email address, a session, or anything about your organization. They are contacted directly by the application itself, only when a feature that needs them is used, and, as with any web request, they see the network address the request came from.
| Host | What it is for |
|---|
| cdnjs (Cloudflare) | Downloads the OCR engine when you ask Whitney Pages to read a scanned page |
| jsDelivr | Downloads the OCR engine's WebAssembly core when reading a scanned page |
| projectnaptha.com | Downloads OCR language data when reading a scanned page |
| GitHub | Checks for and downloads desktop application updates |
Data processing agreement
A data processing agreement covering the subprocessors above is available on request through your Whitney Solutions contact.
Changes to this list
If we add or replace a subprocessor that handles account data, we will tell your organization's administrators by email before the change takes effect.