Sub-Processors

Last Updated: August 12, 2026 · Version: 1.0
A sub-processor is a third party that processes data on our behalf so we can operate Sharp Archive. Every provider listed here is engaged under terms addressing confidentiality and data protection, with a Data Processing Addendum in place where applicable.
We give at least 30 days’ notice before a new sub-processor begins handling customer archived communications, by updating this page. To be notified by email, write to admin@sharparchive.com with “Sub-Processor Notifications” in the subject line.
Customer archived communications and account data are processed in the United States. One website analytics provider processes website usage data in Ireland, as noted below.
The list is grouped by the kind of data involved. For your archived communications we act as a processor and you remain the controller. For website visitor and account data we act as a controller in our own right, and that processing is governed by our Privacy Policy rather than by a Data Processing Addendum.

1. CUSTOMER ARCHIVED COMMUNICATIONS

Summary: These providers may process the communications we capture and store for you. This is the section most relevant to a vendor security review.

Sharp Archive acts as processor. You remain the controller.

Provider
Service
Processing location
Amazon Web Services (Amazon Web Services, Inc.)
Cloud hosting, storage, and compute for the archive

United States (US East / Ohio)

xAI (X.AI LLC)
Language model used by AI review to evaluate archived communications against risk categories

United States

Google (Google LLC — Gemini API)
Fallback language model for AI review when the primary model is unavailable

United States

Google Workspace (Google LLC)
Fallback language model for AI review when the primary model is unavailable

United States

How records are preserved. Archived communications are written to non-rewriteable, non-erasable storage. Once written, a record cannot be altered or overwritten for the duration of its retention period.

AI review and your data. Archived communications are sent to a language model only when AI review evaluates them, and only for that purpose. Outside of AI review, your archived content is not passed to any AI system.

Sharp Archive does not use customer communications to train, fine-tune, or improve any AI or machine-learning model. Our AI providers’ own terms govern their handling of the content we send them; those terms are published by each provider.

AI review can be switched off in your settings. When it is off, none of your archived communications are sent to any language model.

2. ACCOUNT AND BUSINESS OPERATIONS

Summary: These providers handle account, billing, and administrative data rather than the contents of your archive.

Sharp Archive acts as controller.

Provider
Service
Processing location
Stripe (Stripe, Inc.)
Payment processing and billing

United States

Google Workspace (Google LLC)
Business email, documents, and internal collaboration

United States

3. WEBSITE VISITORS AND MARKETING

Summary: These providers support our website and marketing. None of them process the contents of any customer’s archive.

Sharp Archive acts as controller.

Provider
Service
Processing location
Anthropic (Anthropic PBC)
Language model powering the AI assistant on our website

United States

RB2B (RB2B, Inc.)
Identifies business information about website visitors

United States

Clay (Clay Labs, Inc.)
Adds business information about an identified visitor’s organization. Runs only where RB2B returns a result

United States

Google Analytics (Google LLC)
Website analytics and advertising measurement

United States

Hotjar (Hotjar Ltd., a Contentsquare company)
Website behavior analyticsWebsite behavior analytics
Ireland (EU)
Mailgun (Sinch Email, Inc.)
Outbound marketing email delivery

United States

Legacy Growth
Marketing agency conducting business outreach on our behalf

United States

4. NOT SUB-PROCESSORS

Summary: Platforms you connect to Sharp Archive are not our sub-processors — they are your own services, which you authorize us to capture from.

Google Workspace and Gmail, Microsoft 365 and Outlook, YouTube, social media services, and messaging services are independent platforms you authorize us to capture from. They operate under your own agreements with those providers, not ours.

Note that Google Workspace also appears in Sections 1 and 2 as a provider we use for our own business email. That is a separate relationship from any Google Workspace account you connect to Sharp Archive for archiving.

We also use Google Search Console, which reports aggregate search performance for our own website and does not process personal data on our behalf.

5. CHANGES TO THIS PAGE

Summary: We update this page whenever a provider changes, and give 30 days’ notice for any provider touching your archived communications.

We update this page when a sub-processor is added, removed, or changes materially, and we revise the Last Updated date above. For providers handling customer archived communications, we publish the change at least 30 days before it takes effect. Customers subject to a Data Processing Addendum may object within 15 days of notice; if the objection cannot be resolved, the affected services may be terminated.

Contact: Sharp Archive LLC, 6494 S Quebec St, Centennial, CO 80111 — admin@sharparchive.com