Subprocessors

Cribble uses the following subprocessors to provide the service. Each processes customer data only as needed for the purpose listed, under a data processing agreement with terms equivalent to our own DPA. We will update this page at least 30 days before adding or replacing a subprocessor.

Cloudflare, Inc. (United States)

Hosting and infrastructure: application servers (Workers), database (D1), document file storage (R2), inbound email routing for forwarding addresses, and the AI Gateway through which all AI model calls are routed. Documents and extracted data are stored and processed here.

Google LLC — Gemini models (United States)

AI document classification and extraction. Accessed exclusively through Cloudflare's AI Gateway with Zero Data Retention enabled: document contents are not retained by Google beyond returning the response and are not used for model training. Cribble has no direct billing relationship with Google; the service is provided via Cloudflare.

WorkOS, Inc. (United States)

Authentication and user management: sign-in, sessions, workspace organizations, memberships, and invitations. Processes member names and email addresses.

Stripe, Inc. (United States)

Subscription billing and payment processing. Processes billing contact and payment details; Cribble never stores card numbers.

Xero Limited (New Zealand)

Accounting integration — only if you connect Xero. On your instruction, Cribble posts extracted document data and original files to your Xero organisation and reads your Xero reference data (contacts, accounts, tax rates, currencies).

Questions about this list: privacy@cribble.co.