Effective date: 2026-05-31 Last updated: 2026-05-31
Purpose
ruledoc.io is operated by RFPvault (registered in Sweden; contact privacy@ruledoc.io).
This page lists the third-party Sub-processors that ruledoc.io engages to help deliver the Service. It is published in accordance with Article 28(2) GDPR and our Data Processing Agreement (section 11). This list is updated when Sub-processors are added, replaced, or removed.
If you are a customer and would like to receive an email notification when this list changes, email privacy@ruledoc.io with the subject line "subscribe sub-processor changes".
Any change is announced at least 30 days before the new Sub-processor begins processing customer Personal Data, except in cases of urgent security or service-continuity changes (in which case the change will be notified as soon as reasonably possible).
Active Sub-processors
| # | Sub-processor | Legal entity | Role / processing activity | Categories of personal data | Location | Transfer mechanism | Privacy/security info |
|---|---|---|---|---|---|---|---|
| 1 | Hetzner | Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) | Cloud hosting - compute, storage, database, backups | Account data; parsed configuration data; service logs; PDF reports | Finland (Helsinki) (EU) | Within EEA - no Art. 46 mechanism required | https://www.hetzner.com/legal/privacy-policy ; ISO 27001 certified |
| 2 | Anthropic | Anthropic, PBC (San Francisco, CA, USA) | AI text-generation service (report content) | Minimised, parsed rule data only (may include usernames present in rules); no raw configuration text; no secrets | United States | Standard Contractual Clauses (Module Two), per Commission Implementing Decision (EU) 2021/914; data minimisation | https://www.anthropic.com/legal/privacy |
| 3 | Postmark | ActiveCampaign, LLC (Chicago, IL, USA) | Transactional email delivery (account, password-reset, billing notifications) | Recipient email address; email content | United States | Standard Contractual Clauses (Module Two) | https://postmarkapp.com/eu-privacy |
| 4 | Paddle | Paddle.com Market Limited (UK) | Merchant of Record: payment, subscription billing, tax for paid tiers | Name; billing email; billing country; VAT ID; payment metadata | United Kingdom | UK adequacy decision; Paddle acts as Merchant of Record / independent controller | https://www.paddle.com/legal/privacy |
Notes on transmission to Anthropic
Only minimised, parsed rule data is sent to Anthropic, never the raw configuration file and no secrets. Any personal data involved is typically limited to usernames that appear inside policy rules.
How Anthropic processes data sent to its API is governed by Anthropic's own commercial terms and privacy notice. Customers should refer to Anthropic's current terms and privacy notice for that position.
Planned Sub-processors (not yet active)
None at this time.
Internal infrastructure not constituting Sub-processing
The following are not Sub-processors as defined in Article 28 GDPR but are listed for transparency:
- Domain registration: our domain registrar does not access customer Personal Data.
- DNS provider: Hetzner DNS (in scope under the Hetzner row above); does not separately access customer Personal Data.
How to receive notifications of changes
To receive notifications of changes to this list:
- Email privacy@ruledoc.io with subject line
subscribe sub-processor changes. - We will add your email to the notification distribution list.
- To unsubscribe at any time, reply with
unsubscribe.
A copy of any change is also posted on this page with the change date.
How to object to a new Sub-processor
If you have reasonable data-protection grounds to object to a new Sub-processor, you may do so within 14 days of notification by emailing privacy@ruledoc.io. The objection process is set out in section 11.3 of the DPA.