Subprocessors
Last updated October 25, 2026
These are the third parties that process personal information on our instructions when you use Point & Proof. Each is bound by a data processing agreement or equivalent terms, and we review a provider before adopting it. Where personal information leaves the EEA or UK, we rely on standard contractual clauses (with the UK addendum or IDTA where applicable). Email privacy@thepostforge.ai to ask about the safeguards for any provider, or to be told in advance about a change to this list.
Apps you authorize yourself are not listed here. An assistant or other client you connect through MCP access acts on your authorization, not our instructions, and you can revoke it under Settings, MCP access.
| Provider | Service | Personal information involved | Location | Role |
|---|---|---|---|---|
| DigitalOcean | Application, database and backup hosting | Everything stored in the Service (account, content, tokens, logs) is hosted here | Canada — Toronto, Ontario (all Point & Proof services) | Processor |
| Resend | Transactional and service email delivery | Name, email address, and the content of the email we send you | United States | Processor |
| OpenRouter | Routing to AI text and image models | Topics, article text and titles, prompts, drafts, writing samples, image prompts (never tokens, email, IP, or LinkedIn connection data) | United States | Processor |
| Cerebras | AI text models (drafting) | Article text, topics, prompts, drafts, writing samples | United States | Processor |
| Subquadratic (SubQ) | Claim checks against the selected source | Draft text and the selected source article text | United States | Processor |
| Parallel | Article discovery / web search | Topic keywords and derived search queries | United States | Processor |
| PostHog | Product analytics | Browser analytics (only after you accept), account ID, feature usage, page paths | United States | Processor |
| PayPal | Subscription billing | Payment details, subscription and transaction identifiers, billing contact | United States (and PayPal's own group) | Independent controller for payment services, and processor where it acts on our instructions |
| Platform the Service publishes to | Member identifier, authorized profile fields, published posts, OAuth tokens | United States (and LinkedIn's own group) | Independent controller for its own platform; processor for the API calls we make at your direction |
Not subprocessors
- Our own infrastructure — a Redis queue and a self-hosted model proxy run inside the same private network as the application; they are ours, not a third party's.
- Marketing-video tooling — we use an external text-to-speech and image-to-video service to produce Point & Proof's own promotional videos. It processes our brand assets, not customer personal information.
AI training
None of our AI subprocessors use customer prompts, drafts, writing samples, or search queries for model training. OpenRouter's prompt logging and training-use settings are disabled on our account, and Cerebras states that API requests are never used to train models. SubQ (Subquadratic) states that API content is not used to train or improve its foundational models. We use only paid API endpoints. See the Privacy Policy, section 6, for the full disclosure.
Changes
If we add or replace a provider that touches personal information, we update this page and the effective date above, and we notify affected customers by email where the change is material. See the Privacy Policy for the full picture of what we collect and why.