Sub-processors

We use the following providers to run ShareSign. Each holds a data processing agreement with us and, where they operate outside the EEA or UK, standard contractual clauses.

Provider	Purpose	Data	Location
Vercel	Application hosting and delivery	Requests, application data in transit	The application runs in the EU (Frankfurt), beside the database. Pages and files are delivered through Vercel's network, which has locations worldwide. Vercel is a United States company.
Neon	Database	Account, workspace, document, and audit records	EU (Frankfurt) for the primary database
Amazon Web Services	File storage, and the status page at status.sharesign.co	PDFs, signature images, exports, support screenshots; the email addresses of people subscribed to status updates	EU (Frankfurt) for European workspaces; US (N. Virginia) for others and for the status page
Clerk	Sign-in and identity	Name, email, sign-in credentials, sessions	United States
Stripe	Payments	Billing details, card data (held by Stripe only)	United States, with EU entities
Resend	Transactional email	Recipient names, email addresses, document titles; status update emails	United States; messages are delivered from the EU (Ireland)
PostHog	Product analytics and error reports: events from our servers, and page views from your browser sent through our own domain	Pseudonymous user and workspace identifiers, event names, plan, the pages visited with every token and document id removed and only utm campaign parameters kept; error messages and stack traces with emails, signing links, and keys removed; never names, emails, or document contents; identified by a first-party cookie	United States

Last change: 19 September 2026, when the application moved from the United States to the EU (Frankfurt); no sub-processor was added or replaced. Workspace owners are emailed at least 30 days before a new sub-processor starts handling customer data.