Sub-processors
_Last updated 17 October 2026. Part of our Privacy Policy (v1.12)._
A "sub-processor" is a third party that processes personal data on our behalf to help us run ReadNTag. This page lists the sub-processors we currently use. Section 6 of our Privacy Policy describes them by category, this page names them, and it forms part of that Policy.
We do not sell your personal data. Each sub-processor below is used only for the specific purpose described and under that provider's terms. We keep the list to a small number of established providers, and we review it when we add, remove, or change a provider.
Current sub-processors
| Sub-processor | Purpose | Location | |---|---|---| | Amazon Web Services (AWS) | Cloud hosting, database, and file storage | the United States | | Amazon Cognito (AWS) | Account sign-in and authentication | the United States | | Amazon SES (AWS) | Transactional email (verification, password reset, notifications) | the United States | | Stripe | Payment processing for paid plans | United States and EU | | PostHog | Optional product analytics, only if you consent | United States (us.posthog.com) | | Anthropic | Artificial-intelligence assistance for building, operating and supporting the Service, and artificial-intelligence features where offered. Training on the content we send is switched off, within the limits in section 5a of the Privacy Policy. | United States | | Sentry | Error monitoring and crash diagnostics | United States |
PostHog runs only if you accept analytics cookies; declining does not limit your use of ReadNTag, and we also run first-party analytics on our own servers (see the Privacy Policy). Sentry receives technical error data such as stack traces and request context, which can incidentally include limited identifiers; it does not receive your uploaded documents or annotations.
Artificial-intelligence providers. We may use more than one, and we may change them over time. Any new provider will be listed here before it starts processing personal data, and every commitment in section 5a of the Privacy Policy applies to each of them, including that training on the content we send is switched off.
Google sign-in (optional). If you choose to sign in with Google, Google acts as an independent third-party identity provider under its own privacy policy, not as a sub-processor acting on our behalf, so it is not listed in the table above. When you use it, Google shares your name, email address, and a profile identifier with us so that we can create or match your account. The sign-in itself is handled by Amazon Cognito, which is listed above. See the Privacy Policy for details.
We also disclose personal data to authorities where we are legally required to do so.
Changes
If we add or replace a sub-processor, we update this page before the new sub-processor starts processing personal data, and we record the change in the change log below. Where a change materially affects how your personal data is handled, we give notice in line with our Privacy Policy and Terms. Questions: contact us via the Legal & policies page.
Change log
- 17 October 2026 (v1.10): added Anthropic, for artificial-intelligence assistance (section 5a of the Privacy Policy). Each sub-processor is now described as used for the purpose listed and under that provider's terms; earlier versions said each one worked under a data processing agreement.