Sub-processors & Providers
Last updated: July 19, 2026 · Version 2026-07-19
This page lists the current sub-processors and other material service providers that Pipcast, Inc. uses to provide the IP Craft service. It is incorporated by reference into the Data Processing Agreement (the “DPA”) for processing-location transparency (DPA §12.1). Capitalized terms have the meanings given in the DPA.
Pipcast gives advance notice of a new or replacing sub-processor as described in Section 7 of the DPA, and Customer may object on the terms set out there. To be notified of changes, contact privacy@ipcraft.co.
All Pipcast production infrastructure operates in the United States (primary AWS Region us-east-1). Where a Customer transfers EU, UK, or Swiss personal data, the transfer safeguards in the DPA (EU Standard Contractual Clauses, the UK Addendum, and the Swiss adaptations) apply.
Sub-processors
These third parties Process Customer Personal Data on Customer’s behalf as Sub-processors under the DPA.
| Sub-processor (contracting entity) | Service and role | Customer Personal Data | Processing location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting and infrastructure: compute (EKS), managed PostgreSQL databases, S3 object storage, SES transactional email, Amplify hosting/CDN, KMS, monitoring/security services, and Amazon Bedrock managed AI inference. | Potentially all categories in DPA Schedule 1, depending on Customer’s use. | United States — primary Region us-east-1; AI inference (Amazon Bedrock) restricted by Pipcast to approved U.S. regions. |
| Functional Software, Inc. (Sentry) | Application error monitoring and diagnostic telemetry, configured to minimize personal data. | Diagnostic and error information; not intended to contain Customer Content but may incidentally contain Customer Personal Data. | United States data region. |
| Google LLC (Google Workspace) | Corporate and support email. Applies only where Customer sends personal data or Customer Content to a Pipcast email address, or Pipcast uses email to provide support. | Support correspondence, contact information, and content Customer chooses to send by email. | United States, as configured for Pipcast’s Google Workspace account. |
Other material providers (not sub-processors under the DPA)
The following provider is disclosed for transparency. It does not Process Customer Personal Data on Customer’s behalf and is not a Sub-processor under the DPA.
| Provider (contracting entity) | Role | Data | Processing location |
|---|---|---|---|
| Stripe, LLC | Subscription and payment administration. Stripe Processes Customer Account Data under Pipcast’s instructions and separately acts as an independent Controller for its own payment-network, fraud-prevention, legal-compliance, and service-administration purposes. Because the relevant data is Customer Account Data — not Customer Personal Data — Stripe is not a Sub-processor under the DPA. | Billing-contact name and email; customer, subscription, transaction, and invoice identifiers. Card numbers and security codes are collected on Stripe-hosted pages and are not stored by Pipcast. | United States. |
Not separate sub-processors
- Keycloak (identity provider) is self-hosted within Pipcast’s own AWS environment and is not a separate third-party service.
- USPTO Open Data Portal and PatentsView are public data sources that Pipcast queries for public patent information; they are not engaged to Process Customer Personal Data on Pipcast’s behalf.
Managed AI
Pipcast’s AI-assisted features run on Amazon Bedrock within Pipcast’s own AWS account, in approved U.S. regions. Pipcast does not use Customer Content or Customer Personal Data to train, fine-tune, or improve any shared or general-purpose model, and does not permit a sub-processor or model provider to do so. Pipcast processes Customer Personal Data through Amazon Bedrock only using a model and interface for which the inference content is not stored by the inference service or shared with the model provider, and prevents any provider-data-sharing configuration. See DPA §3.6 and Schedule 3.