Subprocessors
The third parties that process customer data for Passim, with what they do and where they are.
Last updated: September 13, 2026
These are the third parties that process customer data on Passim's behalf, what each one does, and where it is. Each was reviewed before use and is reviewed at least annually.
| Provider | Location | What it does for Passim | Applies to |
|---|---|---|---|
| Render | United States | Hosts the application, the production database, secrets, and deployments; holds minimized operational logs. | Website, API, MCP |
| WorkOS | United States | Sign-in and OAuth identity: email address, identity claims, and sign-in events. | Website, MCP |
| Postmark | United States | Transactional email, such as welcome and account notices. | Website |
| Sentry | United States | Error monitoring and uptime alerts, with request bodies, personal data, and IP addresses excluded. | Website, API, MCP |
| Google Workspace | United States | Email for support, access, privacy, and security requests. | |
| GitHub | United States | Source control, continuous integration, and privacy-minimized security evidence. | Engineering |
| Buttondown | United States | Newsletter subscriptions and delivery, if you subscribe. | Newsletter |
Not on this list
Your AI assistant. Claude, ChatGPT, or another MCP client is chosen and controlled by you or your firm under its own agreement, and Passim does not contract with it. The public sources Passim reads, such as courts, agencies, and CourtListener, supply material to the library and never receive your queries.
Changes to this list
This list is updated before a new provider begins processing customer data. Questions about a provider or about data handling: chris@chrishammondlaw.com.