Subprocessors
Published Winch legal document. This version is the current Subprocessors list for the Winch Legal / Trust platform.
This page lists third-party service providers that may process data to help Winch provide, secure, operate, or improve the service.
Current subprocessors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel | Hosting and deployment | Application traffic, logs, technical metadata | Provider-managed |
| Supabase | Database, authentication, storage | Account, workspace, application, authentication, and storage data | Provider-managed |
| Stripe | Billing and payments | Billing customer, subscription, invoice, and payment metadata | Provider-managed |
| OpenAI | AI model processing | Prompt, conversation, document, catalog, and operational context as configured | Provider-managed |
| Mistral AI | AI model processing | Prompt, conversation, document, catalog, and operational context as configured | Provider-managed |
Changes
Winch may update subprocessors as the service evolves. Material changes may be communicated to affected organization contacts where required by the applicable agreement or law.
Notes
This starter list must be reviewed against the actual production vendor inventory before being treated as approved.
What changed
Starter English legal documents and cookie inventory for the Winch Legal / Trust platform.
legal-foundation-2026-05-12Initial Winch Legal / Trust foundationEffective May 12, 2026
Previous versions
No archived versions are available yet.
Version metadata
- Content hash
- 0a7d05f308eb9c0682512f6951ca4755e10a14f03cf9bcb05f420831ef42c9f1
- Source path
- legal/documents/subprocessors/2026-05-12.en.md
- Change level
- editorial
- Reacceptance required
- No