Subprocessors
The third parties that process customer data for Passim, with what they do and where they are.
Last updated: November 9, 2026
These are the third parties that process customer data on Passim’s behalf, what each one does, and where it is. Provider reviews cover data handling, access, contracts, and available assurance. The current review and collection of restricted assurance reports are in progress.
| Provider | Location | What it does for Passim | Applies to |
|---|---|---|---|
| Render | United States | Hosts the application, the production database, secrets, and deployments; holds minimized operational logs. | Website, API, MCP |
| Backblaze B2 | United States | Stores encrypted offsite backups of the primary database and operational recovery data, including account and saved research records. | Backup and recovery |
| WorkOS | United States | Sign-in and OAuth identity: email address, identity claims, and sign-in events. | Website, MCP |
| Stripe | United States | Payments, subscriptions, and tax. Card numbers go to Stripe and never reach Passim’s servers. | Billing |
| Postmark | United States | Transactional email, such as welcome and account notices, email alerts, and email digests. | Website, email alerts, email digests |
| Sentry | United States | Error monitoring and uptime alerts, with request bodies, personal data, and IP addresses excluded. | Website, API, MCP |
| Cloudflare | Global | Render’s hosting runs behind Cloudflare, which terminates TLS for website, account, reader, and connector traffic. Cloudflare also runs Turnstile verification on contact and newsletter forms, where form message contents are not sent to it, and the Cloudflare Pages projects that serve /mandamus and /litigation. | Website, account, reader, API, MCP, form security |
| Google Workspace | United States | Email for support, access, privacy, and security requests. | |
| GitHub | United States | Source control, continuous integration, and privacy-minimized security evidence. | Engineering |
| PostHog Inc. | United States | Cookieless public website analytics: limited page views, referral and campaign information, device categories, and connection, trial, plan-selection, and billing-link clicks. No session recordings or research/account data. IP addresses are used for daily visitor hashing and removed from stored events. | Public home, library, pricing, and Get started pages only |
Not on this list
Your AI assistant. Claude, ChatGPT, or another MCP client is chosen and controlled by you or your firm under its own agreement, and Passim does not contract with it. The public sources Passim reads, such as courts, agencies, and CourtListener, supply material to the library and never receive your queries.
Changes to this list
We update this list when the providers or processing described here change. Questions about a provider or about data handling: chris@passimai.com.