Subprocessors
Infrastructure and hosting
| Vendor | Purpose | Data categories | Location |
|---|
| DigitalOcean, LLC | Compute for the KnowHow API, web app, identity server, search service and background jobs; managed MySQL databases; block storage; Spaces object storage (file bucket, database backups); managed Kubernetes and load balancers | All customer content at rest and in transit; org, membership and billing ledgers; user display names and avatar URLs; backups; service logs (user and org ids). The primary application database stores no email addresses or phone numbers. | United States (San Francisco, sfo3) |
| Cloudflare, Inc. | DNS, CDN, WAF and TLS termination for every bopus.ai and know-how.app hostname; Workers (application compute for search, upload brokers, signed URLs, image and PDF handling); Workers AI (search embeddings, reranking and answer synthesis, executed inside Cloudflare); Vectorize (search index holding embeddings and text chunks); AI Search; R2 (PDFs, attachments, exports); Images (user-uploaded images, avatars); Stream (video); Tunnels; Email Routing | Request metadata and IP addresses; customer documents, images and video; full text of customer content and derived embeddings for search; file metadata and upload tokens | Global edge. R2, Images and Stream buckets are on Cloudflare's default (US) jurisdiction; bucket location is "auto", not pinned. |
Content processing
| Vendor | Purpose | Data categories | Location |
|---|
| Google LLC (Google Cloud Document AI: Layout Parser and OCR) | Converting imported PDFs to editable text; OCR of scanned PDFs | Full contents of the customer's PDF during processing (transient) | United States ("us" multi-region) |
Identity and communications
| Vendor | Purpose | Data categories | Location |
|---|
| Twilio Inc. | SMS verification codes and account/service texts from toll-free +1 844 460 7352; app notification texts and user replies | Phone number, message content (one-time codes, notification text), delivery metadata (timestamps, carrier status). One-time-code bodies are not stored by bOpus. Twilio processes numbers only to deliver on bOpus's behalf. | United States |
| SMTP2GO Ltd | Transactional email: sign-in codes, policy-acceptance copies, account notices, support and help-form mail | Recipient email address and name, org name, subject and body of system mail | Global relay; company is in New Zealand |
Commerce and notifications
| Vendor | Purpose | Data categories | Location |
|---|
| RevenueCat, Inc. | Subscription and purchase state; purchase webhooks | Purchaser app-user id, product ids, purchase events. No customer content. | United States |
| Apple Inc. (App Store / StoreKit) | In-app purchase and subscription billing on iOS | Purchase data held on the Apple ID side; Apple is the merchant of record for App Store purchases | Apple |
| Apple Inc. (Apple Push Notification service) | iOS push notifications | Device push tokens; notification text (titles and snippets of comments and messages) | Apple |
| Browser push services (Google, Mozilla or Apple, per the user's browser) | Browser notifications on the web app | Push endpoint; notification text | Vendor of the user's browser |
Changes to this list
bOpus updates this page before a new subprocessor begins processing customer data. Customers under a Data Processing Agreement receive notice per the DPA's subprocessor-change clause.
