Last updated: September 3, 2026
Cortex uses a small number of third parties to operate the platform. Each one is bound by written data protection obligations no less protective than those in our Data Processing Addendum, and we remain fully responsible for their performance.
| Sub-processor | Purpose | Data processed | Entity location |
|---|---|---|---|
| Netlify, Inc. | Website and application hosting, content delivery, and execution of our server-side functions. | All data transmitted to and from the platform, including IP addresses and request contents. | United States |
| Google LLC | Database, authentication, and file storage; speech-to-text transcription, document text extraction, speech synthesis, and search indexing; address geocoding and maps. Calendar synchronisation and business-listing management are optional and take effect only if you connect them. | Account and sign-in credentials, job and claim data, photographs, documents, audio recordings, and property addresses. Where you connect them, calendar events and business-listing content. | United States |
| Stripe, Inc. | Subscription billing and payment processing. Where you enable it, processing of payments from your own customers. | Name, email address, company name, billing address, invoice and subscription records. Card details are collected and held by Stripe. | United States |
| Amazon Web Services, Inc. | Application hosting and API infrastructure for parts of our own platform, transactional and marketing email delivery, email delivery and open tracking, and DNS for sending domains. Also serves AI features through Amazon Bedrock as a secondary provider when Anthropic is unavailable. See the AI model providers section below. | Recipient names and email addresses, message contents, and delivery and engagement events. Where Amazon Bedrock serves an AI request, the same categories of data listed for Anthropic below. | United States |
| Twilio Inc. | Text and multimedia messaging, voice calling, telephone number provisioning, and call recording. | Telephone numbers, message contents, call audio, and call metadata. | United States |
| Anthropic, PBC | AI features, including workflow generation, document and receipt extraction, transcription analysis, scope and estimate assistance, and reporting insights. See the AI model providers section below. | Job and claim data, notes, transcripts, estimates, documents, photographs, and correspondence submitted to AI features. | United States |
| Microsoft Corporation | Calendar synchronisation with Outlook. Optional — takes effect only if you connect it. | Calendar events, job schedules, and crew assignments. | United States |
| Intuit Inc. | Accounting synchronisation (QuickBooks Online) and card processing (QuickBooks Payments). Both optional — they take effect only if you connect them. | Invoices, payments, and customer records. Where card processing is enabled, payer details and payment amounts. | United States |
| Block, Inc. | Card processing through Square. Optional — takes effect only if you connect it. | Payer name, email address, and payment amounts. Card details are collected and held by Square. | United States |
| Authorize.Net LLC | Card processing. Optional — takes effect only if you connect it. | Payer details and payment amounts. Card details are collected and held by Authorize.Net. | United States |
| Cloudflare, Inc. | Bot and abuse prevention on the public lead-capture forms you embed on your own website. | Visitor IP address and browser challenge data. | United States |
| Routific Solutions Inc. | Route optimisation for dispatch and scheduling. Optional — takes effect only if you use it. | Job addresses, time windows, and crew locations. | Canada |
| OpenWeather Ltd | Weather data recorded against jobs and drying records. | Job coordinates and dates. | United Kingdom |
| U.S. Census Bureau | Address geocoding. | Property addresses and coordinates. | United States |
Locations shown are the sub-processor’s corporate domicile. Where a sub-processor’s processing location differs, we will confirm it on request.
Our website links to third-party services, including our meeting room. Those services act on their own behalf rather than ours, and are covered by the third-party links section of our Privacy Policy rather than listed here.
| Provider | Retention of submitted data | Used for model training? |
|---|---|---|
| Anthropic, PBC | Governed by Anthropic's published Commercial Terms. We do not configure a custom retention period on our side. | No. Under Anthropic's Commercial Terms, inputs and outputs submitted through its API are not used to train its models. This is a contractual protection under those terms rather than a setting we configure. |
| Amazon Web Services, Inc. (Amazon Bedrock) | Secondary provider for the same Anthropic Claude models, used when Anthropic's own service is unavailable or as configured by us. Governed by the Amazon Bedrock data-protection terms; Amazon Bedrock does not store prompts or completions after the response is returned. | No. Under the Amazon Bedrock service terms, inputs and outputs are not used to train Amazon's or Anthropic's models. |
We update this page before a new sub-processor begins processing subscriber data. To be notified of changes, email info@job-dox.com and ask to be added to our sub-processor notification list.
If you have a data protection concern about any sub-processor listed here, contact us at info@job-dox.com. We will review it in good faith and work with you on alternatives or compensating controls where we can.