glacialbooks
HomeFeaturesWho it is forPricingFree toolsAbout

Subprocessor List

Effective and last updated: July 31, 2026.

These providers may process personal data to operate GlacialBooks. A connected-service provider receives data only when the customer uses or authorizes that service.

Current subprocessors

Provider

Purpose

Data categories

Primary processing location

Fluent Terrain LLC

GlacialBooks product licensing, platform development, and customer-authorized engineering escalation

The minimum account, support, diagnostic, and Customer Data needed for an approved investigation or platform repair

United States.

Microsoft Corporation

Azure hosting, managed PostgreSQL, storage, Key Vault, monitoring, email delivery, Azure OpenAI reasoning, and Document Intelligence

Customer Data, account data, permission-scoped model context, uploaded documents, service communications, security and operational telemetry

United States. Core production compute and storage use East US and East US 2.

Clerk, Inc.

Identity, session, email-verification, and account-security services

Name, email, identity identifiers, authentication factors and events, organization membership references

United States with provider infrastructure and support access as contractually permitted.

Plaid Inc.

Customer-authorized bank and card connectivity

Institution, account, balance, transaction, Item, and connection-health data. GlacialBooks does not receive credentials entered in Plaid Link.

United States with provider infrastructure and financial-institution transfers as needed for the connection.

Stripe, Inc.

Subscription billing, Checkout, billing portal, invoices, and signed billing webhooks

Customer and organization identifiers, billing contact, plan, subscription, invoice and payment status. Stripe receives payment-card details directly.

United States and other locations covered by Stripe's data-transfer terms.

PostHog, Inc.

Consent-based product analytics

Pseudonymous visitor identifier, account or organization reference, device and page path without query strings. No form contents, session recordings, or automatic element capture.

United States cloud endpoint.

Cloudflare, Inc.

DNS, edge delivery, traffic protection, and aggregate web performance telemetry

IP and request metadata, browser and network attributes, security signals, and aggregate performance measurements

Global edge network with contractual transfer protections.

Optional and customer-directed providers

A customer may direct GlacialBooks to exchange data with an integration that the customer enables. A provider shown as Coming soon does not receive Customer Data through that integration until it is enabled and authorized. Customer accountants, advisers, and service providers invited directly into an organization act under the customer's direction and are not GlacialBooks subprocessors.

Provider diligence and contracts

We review the purpose, access, security posture, privacy terms, incident duties, deletion terms, and transfer mechanism of a provider before production use with Customer Data. Subprocessors must protect personal data under written terms appropriate to their role. We remain responsible for our obligations under the Data Processing Addendum when a subprocessor performs processing on our behalf.

Changes and objections

We will post changes to this list and provide at least 30 days' advance notice before a new subprocessor processes Customer Data when the Data Processing Addendum requires notice. A customer may object during that period on reasonable data-protection grounds by emailing [email protected]. We will work in good faith on a reasonable alternative. If no alternative is available, either party may end the affected service without penalty for the unused prepaid period.

Related documents

See the Data Processing Addendum, Privacy Policy, Data and Processing Inventory, and Information Security Policy.