Finalit
← Legal

Subprocessors

You're pasting your cover letter into a text box. This is the list of every company that could see it.

Last updated 20 July 2026. Draft, pending legal review.

To run Finalit we rely on a small number of providers who process data on our behalf. Most consumer products don’t publish this list. We do, because “who actually reads my draft” is the first question worth asking about a tool like this.

SupabaseDatabase, authentication, file storage and backend functions.EU and US
VercelWebsite and application hosting, content delivery.Global edge network
AnthropicProcesses draft text to produce assessments, diagnoses and rewrites. Contractually prohibited from training on it.US
OpenAIAlternative model provider for the same assessment and rewrite functions. Contractually prohibited from training on it.US
PostHogProduct analytics, configured without cookies.EU
StripePayment processing. Only involved once you subscribe to a paid plan.EU and US

Connected accounts

Google Drive and Notion aren’t subprocessors, because we don’t send them your data. They are services you connect so Finalit can read documents you choose to import. You can disconnect either one at any time from Settings, which revokes our access.

Transfers outside the UK

Where a provider processes data outside the UK, we rely on appropriate safeguards for the transfer, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Changes to this list

We update this page when our providers change. If you’d like to be told in advance of a new subprocessor, email privacy@finalit.aiand we’ll add you to the notification list. How we handle your data generally is set out in the Privacy Policy.