Sub-processors — GetSimpleSign

1Current sub-processors

Amazon Web Services Storage of agreement documents and encrypted database backups, and the servers that run the Service.
Processes in Canada (Canada Central region).

Twilio SendGrid Delivery of signing invitations, reminders, completion notices, and account email. Processes recipient email addresses, message content and delivery status. Document contents are not sent to it.
Processes in the United States.

Stripe Payment processing. Collects card details directly from the payer; we never receive complete card numbers. Processes billing name, address, and transaction records.
Processes in the United States.

That is the complete list. It matches Section 8 of our Privacy Policy, and no account or document data is stored outside Canada.

2Planned

We publish a provider here before it starts, not after. Two are currently planned.

Twilio (Verify) One-time passcodes sent by text message, for organizations that want a Signer to prove control of a mobile number as well as an email address. Would process recipient mobile numbers and verification outcomes, in the United States. This is an optional feature that a sender chooses per recipient; it is not used unless a Customer turns it on.
Notice posted 27 August 2026. It will not begin processing before 26 September 2026, and we will update this entry with the actual start date when it does.

Anthropic Drafting the messages we send to people we already know about the Service. Would process a name, an organization, a role, and the note recording how we know that person — the prospect information described in Section 3 of the Privacy Policy — in the United States. It would not receive account information, document contents, templates, signatures, or recipient information of any kind, and its commercial terms do not permit training on what is sent to it.
Notice posted 27 August 2026. It will not begin processing before 26 September 2026, and we will update this entry with the actual start date when it does.

3How we give notice

We will publish a change on this page at least 30 days before a new sub-processor begins processing personal information. Customers who want to be told by email can ask at [email protected].

If a Customer objects to a new sub-processor on reasonable data-protection grounds, it may tell us within those 30 days and, if we cannot offer an alternative, terminate the affected part of the Service and receive a refund of prepaid unused fees.