SigningOSSigningOS

Last updated: May 4, 2026

Subprocessors

SigningOS uses a small set of third-party services to operate. This page lists every one, what data it touches, where it's hosted, and links to its own privacy program. We update this list when subprocessors change.

Current subprocessors

Supabase
United States
Privacy policy
Purpose

Authentication, Postgres database, file storage, and edge functions.

Data touched

Account credentials, signing orders, borrower NPI entered by the LSA, and temporary PDF uploads.

Anthropic
United States
Privacy policy
Purpose

AI document analysis (Claude API) for guided signing scan-back and order extraction.

Data touched

PDF document content during processing only. Not retained after the request completes.

RevenueCat
United States
Privacy policy
Purpose

Subscription management for SigningOS Pro.

Data touched

App Store transaction identifiers, subscription status, and the RevenueCat user ID.

Resend
United States
Privacy policy
Purpose

Transactional email for signing reminders, account confirmations, and founder updates.

Data touched

LSA email address and message body.

Apple
Per Apple's region of operation
Privacy policy
Purpose

In-app purchase processing, Apple Sign In authentication, and push notifications.

Data touched

Apple ID for sign-in users, payment data per Apple's policy, and APNS device tokens.

Notification of changes

When we add a new subprocessor that handles consumer NPI, we will update this page and notify users via in-app message or email before the new subprocessor begins handling production data. The "Last updated" date at the top of this page reflects the most recent change.

Contact

Vendor due-diligence requests and security questionnaires:
support@signingos.app