Subprocessors
Last updated: September 15, 2026
CaseRail uses the following subprocessors to provide core functionality:
| Category | Provider | Purpose | Region |
|---|---|---|---|
| SendGrid / Resend | Transactional email | US | |
| SMS | Twilio | SMS notifications (not used for sign-in; two-step verification uses authenticator apps) | US |
| Payments | Stripe | Billing | US |
| Database | Neon | Primary Postgres hosting | US (AWS us-east-1) |
| Analytics and Error Monitoring | PostHog | Product analytics and error tracking — no personal information is sent | EU/US |
| Observability | Datadog | Logs/metrics — no personal information is sent | US |
| Bot Protection | Cloudflare Turnstile | Anti-abuse | Global |
| OCR | Tesseract (local, default) / Azure AI Document Intelligence / AWS Textract | Document processing — Tenant-selected | Varies by Tenant selection |
| Maps | OpenStreetMap Nominatim / Google Places / Azure Maps / Esri ArcGIS | Geocoding — Tenant-selected | Varies by Tenant selection |
| E-Signature | CaseRail Sign (built in) | Signing in the portal and the staff app — not a subprocessor | The Tenant's own data region |
| E-Signature | DocuSign (Tenant's own account, Tenant-enabled) | Sends documents for signature from the organisation's own DocuSign account (Send for signature) | The sending account's site: Canada (ca.docusign.net), United States or Europe |
| E-Signature | Documenso (self-hosted in the region's cell, Tenant-enabled) | Sends documents for signature through a Documenso instance run unmodified as a sidecar in the region's cell (Send for signature) — no third party | Self-hosted: the region the administrator declares the sidecar runs in (no third-party vendor) |
| Queueing | Redis / Azure Service Bus | Background jobs | US/CA |
| AI Assistant | Anthropic (Claude) / Groq / Tenant-supplied OpenAI-compatible endpoint | AI copilots — Tenant-enabled, off by default. Request text and the records the assistant reads are sent to the selected provider; no training on customer data. | Anthropic, Groq: US. Tenant-supplied endpoint: Tenant's choice. Only providers approved for the Tenant's data region are offered. |
Several integrations above (maps, OCR, e-signature, AI assistant) are enabled per-Tenant. A Tenant’s actual subprocessor footprint reflects only the providers it has configured, and an administrator can see and download that organization’s own list in Settings › Data Residency.
A Tenant can also require that every service it enables be hosted in its own data region (residency-strict mode), in which case a provider outside that region cannot be turned on at all.