Sub-Processors
Third-party service providers that process data on behalf of IT Folder
IT Folder (operated by Tiny Electrons LLC) uses a limited number of third-party service providers ("Sub-Processors") to help deliver the Service. Each Sub-Processor processes data only on our behalf and under our instructions, subject to data protection obligations no less protective than those in our Data Processing Addendum (DPA).
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, storage, and database infrastructure | Application records, tenant files, sessions, and content-delivery requests | Primary application stores: US West (Oregon). CloudFront uses a separate edge network. |
| ipapi.co (Kloudend, Inc.) | Network and ISP enrichment for network documentation and investigation | Queried IP address, sent over HTTPS to obtain ISP/organization, ASN, country, and approximate network location | United States-based provider with processing in multiple locations; see provider privacy policy |
| Stripe, Inc. | Payment processing | Name, email, billing address, payment method | United States |
| Functional Software, Inc. (Sentry) | Error and performance monitoring for the application when enabled, so we can find and fix faults | Error reports and sampled performance traces may include stack traces, page or API routes, and browser and operating-system details. Default personal-data collection is turned off and request cookies and headers are removed. Error text and URLs may still contain identifying information. | United States |
| Google LLC (Google Maps Platform – Places) | Address suggestions when you type an address or location in the application | The address text you type, plus the standard request data a browser sends (IP address, browser and device information) | United States |
| Google LLC (Gemini API) | AI query agent: turns natural-language questions into read-only database queries. On by default for new organizations; an administrator can turn AI off at any time | Your question, recent questions in the same conversation, database schema metadata (table and column names and types), and database error messages from a failed query, PII-redacted before sending. No query results or database rows | United States |
| TypeSafe AI (Jev API) | Question classification for the AI query agent (BIP): works out which kind of record and operation a question is about, so it can be routed. Always used when the organization's AI is on (on by default for new organizations; an administrator can turn AI off at any time). TypeSafe AI processes these inputs on IT Folder's behalf under its agreement with IT Folder and returns a structured label. If Jev's monthly allowance is reached or Jev is unavailable, IT Folder uses its built-in routing instead and makes no Jev call | Your question and, when conversation history is on, your previous question, plus the title and source table of a document you are asking about, all PII-redacted before sending; a fixed classification rubric and the list of allowed record types. No database rows, query results or document content | United States |
| Google LLC (Google Analytics) | Marketing site analytics | Usage data (Google Analytics 4 does not store IP addresses), analytics cookies (marketing pages only, after consent; not used in the application) | United States |
| Google LLC (YouTube) | Embedded product videos on the marketing site | IP address, browser and device information, and video playback interactions (marketing pages only; served in privacy-enhanced mode via youtube-nocookie.com) | United States |
AI Providers Used With Your Own API Key
If an administrator turns on documentation assistance, Q&A, or OpenAI embeddings and supplies your organization's own API key, IT Folder sends PII-redacted prompts, document excerpts, or document chunks to OpenAI or Anthropic under that key. If your organization supplies its own Anthropic API key, the AI query agent can also use Anthropic (Claude) under that key to turn questions into read-only database queries; it receives the same data as the Gemini query-agent entry above: your question, recent questions in the same conversation, database schema metadata (table and column names and types), and database error messages from a failed query, PII-redacted before sending. No query results or database rows. Documentation assistance, Q&A and OpenAI embeddings are off by default for new organizations, and neither provider is used until your organization supplies its own key. See AI Transparency for what each feature sends.
Change Notification
We will notify customers at least 30 days before adding or replacing a Sub-Processor. If you object to a new Sub-Processor on reasonable data protection grounds, you may notify us in writing within 15 days. If we cannot reasonably accommodate the objection, you may terminate the affected subscription with a pro-rata refund of prepaid fees, as described in our Terms of Service (Section 15.3).
Subscribe to Updates
To receive email notifications of changes to this Sub-Processor list, contact us at support@itfolder.com with the subject line "Sub-Processor Updates."
Related Documents
Terms of Service · Privacy Policy · Cookie Policy · Security & Trust Center
Questions about our Sub-Processors? Contact support@itfolder.com.