Subprocessors
The providers that process customer data on our behalf to run holysheet.
Each one is bound by a written contract with data protection obligations at least as protective as our DPA. We’ll update this page and email workspace admins at least 30 days before adding or replacing a subprocessor, so you can object.
| Provider | What it does for holysheet | Data it processes | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosts the website, workspace and API; runs our database; runs the AI model through Cloudflare Workers AI and AI Gateway | All service data in transit; account, workspace and usage records at rest; questions and rows while a request runs | Global network. Database in Western Europe. Company in the United States. |
| WorkOS, Inc. | Sign-in, user and workspace (organisation) management, invitations and sign-in emails | Names, email addresses, sign-in details, memberships and roles, IP addresses | United States |
| TypeSafe AI | Provides the Jev model that answers questions | The questions and rows you send, while a request runs | Being confirmed with TypeSafe; we’ll update this page |
Not subprocessors
- Google and Microsoft run the Google Sheets and Excel add-ins under your own agreement with them. They act for you, not for us.
- Fontshare and Google Fonts serve the fonts on our pages. They receive visitors’ IP addresses, but no customer data. See the privacy notice.
Questions? Email legal@getholysheet.com.