These are the third parties we rely on to run Tickbox. Each only receives the data it needs to do its job, and each is bound by a data processing agreement. We keep this list current.
| Provider | What it does | Data it processes | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, application compute, database, file storage, vector search (the search index behind grounding), and privacy-friendly, cookieless web analytics (aggregate page views only). | Your account details, uploaded questionnaires and policies, extracted questions, and draft and approved answers. | Global edge network, with the primary database region in the EU/UK. |
| Anthropic, PBC | The AI (Claude) that reads questionnaires and drafts answers. | The content of your uploads, the extracted questions, relevant saved answers, and relevant excerpts from your policies. Not used to train models when accessed via the API. | United States. |
| Stripe, Inc. | Payment processing and invoicing for one-off unlocks and subscriptions. | Your email address, and billing and payment status. We never see or store your full card number. | United States / EU. |
| Resend (Plus Five Five, Inc.) | Sending transactional email (verification, password resets, receipts, and service notifications). | Your email address and the contents of those emails. | United States. |
International transfers
Where a provider processes data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (or the EU Standard Contractual Clauses with the UK Addendum) and each provider's own compliance commitments.
Changes to this list
If we add or replace a sub-processor, we will update this page. Business customers with a signed Data Processing Addendum can ask to be notified of material changes in advance. Questions: hello@usetickbox.com.
Answer your questionnaire in minutes
Drop it in and Tickbox drafts every answer for you to review. Your first few are free.
Try it free