Subprocessor and Recipient Register

This register identifies the providers used for the Service, their permitted functions and their access to information. Capitalized contractual terms have the meanings in the Platform Subscription Agreement and Data Addendum. A provider listed as conditional is not an enabled feature. A service brand does not by itself identify Talden's contracting entity, applicable region or endpoint retention. No unresolved route is approved for Customer Content.

The Data Addendum's content-use restrictions apply throughout the approved processing chain. A public provider policy is not permission to vary those restrictions. Material changes receive the direct notice and objection procedure in Data Addendum section 7. Customers need not subscribe to a separate mailing list to receive that notice.

Vercel. Hosting, private original-file storage, scheduled jobs and AI Gateway routing. Gateway-routed requests can include the selected prompt, conversation, extracted file text, matter context, approved memories and custom instructions. Hosting and storage can process the broader Customer Content held by the Service. Metadata for metering and reliability must be separated from content. The Gateway's retention controls are distinct from the receiving model's controls; a setting for one route does not cover every route. Supplier particulars: To be confirmed.

Anthropic. AI inference for chat, drafting and internal review, normally through Vercel AI Gateway. Receives the context selected for the task, which can include confidential legal material, extracts, instructions and approved memories. Internal review is part of generating Customer's requested work, not permission for a shared training or general evaluation dataset. Supplier particulars: To be confirmed.

OpenAI. Optional dictation, spoken playback, scanned-page OCR and enabled public-search functions. Dictation sends audio; playback sends selected answer text; OCR sends scanned-page images; search receives the information necessary for the enabled query. Selecting a text-only task does not authorize unrelated audio recording. Supplier particulars: To be confirmed.

Perplexity. Research and public-source search. Receives reduced issue-level queries and expressly identified public targets, such as case names, statutes or public filings. It does not receive uploaded files, complete matter records, memories or custom instructions. A reduced query may still reveal sensitive context; query minimization and the approved routing controls apply. Supplier particulars: To be confirmed.

Neon. Postgres database for accounts, matters, transcripts, extracted text, saved work, memories and relevant records. Supplier particulars: To be confirmed.

Redis hosting provider. Cache, rate-control and job/state services only to the extent actually configured. Supplier particulars: To be confirmed.

Resend. Transactional service emails, including account verification and notices. Permitted information is the recipient address, required account identifiers and the minimum notice payload. Matter content is not included in routine billing or verification emails. Supplier particulars: To be confirmed.

Sentry. Error reporting using content- and identity-stripped telemetry. Prompts, files, client names, matter titles, authorization tokens and full request bodies must not enter ordinary error reports. Supplier particulars: To be confirmed.

Intercom. Optional Help chat, loaded when the User selects Help. Initial loading is anonymous in the described configuration; information a User deliberately supplies in a support conversation may identify the User. Protected examples require the separate support-access authorization and an approved route. Supplier particulars: To be confirmed.

Stripe. Payment processing and billing portal when enabled. Talden supplies account identifiers; Stripe may separately obtain payment and billing information from the payer. Client matter content is not supplied for payments. The parties' respective processing roles depend on the particular Stripe service. Supplier particulars: To be confirmed. Listing Stripe does not represent that automatic tax, cancellation notices or refunds have been configured.

Public-site analytics and advertising. Vercel page analytics and any enabled Google Tag Manager, Google Analytics, Google Ads or LinkedIn technology are disclosed under the Cookie Notice. Their actual fields, recipients and retention must be recorded before activation. These tools must not receive authenticated-workspace matter data. Optional marketing tools remain disabled until the required choices and disclosures work. They are not authorized recipients of Customer Content under the Data Addendum.

Microsoft, Google and Clio connected accounts. These are ordinarily services Customer independently selects and contracts for, rather than Talden-selected model or hosting subprocessors. Connecting an account authorizes the import or action specifically described in the Agent Schedule and connection screen. Imported copies processed by Talden and its selected suppliers remain subject to the Data Addendum and applicable source-provider restrictions. Microsoft 365 read-only access is the launch connection. Google and Clio, including their non-U.S. regional endpoints, remain unavailable until separate approval and activation. A provider may also act in another capacity under a separate Talden contract; that distinct role must be added to this register if used.