Legal
Subprocessors
Last updated: 5 November 2026
To run WALDHORN.AI we rely on a small set of trusted third parties. Each processes data only as needed to provide its part of the service, under contractual data-protection obligations.
| Subprocessor | Purpose | Primary location |
|---|---|---|
| Cloudflare, Inc. (Turnstile) | Bot verification on public account registration using browser and network signals | United States / global network |
| Google Cloud / Firebase (Google LLC) | Application hosting, authentication, database (Firestore), and encrypted file storage | United States |
| Vercel AI Gateway (Vercel, Inc.) | AI inference for contract generation, review, royalty audit, and lyrics formatting. It routes your content to third-party AI model providers, which do not train on it | United States (the providers it routes to vary) |
| Stripe, Inc. | Payment processing and billing (card data is handled by Stripe, not by us) | United States |
| Resend (Plus Five Five, Inc.) | Transactional email, including signing links and notifications | United States |
| Vercel, Inc. | Application hosting, content delivery, and privacy-friendly analytics | United States |
| Google Analytics (Google LLC) | Optional, consent-based analytics for public website visits; private workspace pages and documents are excluded | United States |
Changes
This list is current as of the date above. When we add or replace a subprocessor that handles personal data, we will update this page. For how these subprocessors fit into our overall data handling, see the Privacy Policy.
Corporate registration details for WALDHORN AI INC are available on request. To ask about a subprocessor, or to object to one, send us a data request.