Subprocessor List
Third parties that may process Customer Data on our behalf. Last updated July 4, 2026.
Centralize Legal ("Processor") uses the following Subprocessors to operate the service. This list excludes Customer-connected systems (Clio, Microsoft 365, Dropbox) and Customer-connected AI providers (for example Anthropic or OpenAI), which Customer authorizes separately. Content retrieved via the service is transmitted to the AI environment the Customer connects. That AI provider is a Customer-connected system under the Customer's own agreement, not a Subprocessor of Centralize Legal.
| Subprocessor | Purpose | Location | Data categories |
|---|---|---|---|
| WorkOS workos.com |
Authentication, organization membership, and session management (AuthKit) | United States | Account name, email, firm/organization identifiers, session metadata |
| Google Cloud (KMS) cloud.google.com/kms |
Encryption key management for OAuth refresh tokens (envelope encryption) | United States (us-west1) | Cryptographic key material only — no customer document or email content |
| Railway railway.app |
Application hosting and managed PostgreSQL database | United States (us-west1) | Encrypted OAuth tokens, non-privileged index metadata, audit logs, billing identifiers |
| Twilio twilio.com |
SMS delivery for optional account notifications | United States | Mobile phone numbers and generic (non-privileged) SMS message bodies |
| SendGrid (Twilio) sendgrid.com |
Transactional email (reminders, billing notices, onboarding) | United States | Email addresses and generic (non-privileged) email content |
| Stripe stripe.com |
Subscription billing and payment processing | United States | Billing contact, Stripe customer/subscription IDs — card data held by Stripe |
Changes
We may update this list as we add or replace infrastructure providers. Material changes will be reflected on this page with an updated "Last updated" date. Customers with active subscriptions may contact support@centralizelegal.com with questions.
Related documents
See also: Data Processing Agreement · Privacy Policy · Security Overview
Related: Privacy Policy · Terms of Service · Security Overview · Data Processing Agreement · Subprocessors · Data Residency