Legal
Subprocessors
Last updated July 24, 2026
These are the third-party vendors we use to run DepoFlow. Because the default workflow processes everything on your machine, most vendors only ever see thin account or billing records — case content reaches a vendor only when you explicitly invoke the feature that needs it. Each vendor is bound by contract to use the data solely to provide its service to us. See the Privacy Policy for how we handle data generally.
| Vendor | Purpose | Data Received | Location | When It Applies |
|---|---|---|---|---|
| Railway | Application and database hosting | Account records, job envelopes (witness, matter, duration, status), billing records | United States | Always (cloud account) |
| Cloudflare (R2) | Object storage for cloud files | Files you explicitly share or render in the cloud; installer downloads | United States | Only when you use a cloud file feature |
| Stripe | Payment processing | Name, email, payment card details (entered directly with Stripe), transaction history | United States | When you purchase credits or a subscription |
| Resend | Transactional email delivery | Email address, message content (verification, receipts, notifications) | United States | Always (account email) |
| Kit | Newsletter and product announcements | Email address, subscription preferences | United States | Only if you opt in to marketing email |
| Modal | GPU compute for cloud-accelerated transcription | Audio for the specific job you submitted, processed transiently | United States | Only when you opt in to cloud acceleration for a job |
| Recall.ai | Live transcription of remote depositions | Meeting audio and live transcript for the session you start | United States or European Union (selectable region) | Only when you start a live transcription session |
Changes to This List
Before adding a subprocessor that will handle case content, we update this page and notify account holders by email, giving firm customers a reasonable opportunity to object. Vendors that only handle account or billing records are added to this page as they come into use. Questions: privacy@depoflow.com.