Subprocessors
An earlier version, kept at its own address.
Effective 9 October 2026 · version subprocessors-2026-10-09 · replaced by a later version
This is an earlier version, kept so that anybody who agreed to it can still read it. It is not the wording a new customer agrees to today: that is the current Subprocessors. Every version.
Last updated 9 October 2026 (version subprocessors-2026-10-09). These are the companies that handle information for SourceSecure. Only OpenAI receives any text from AI chats, and only after names and numbers have been replaced with stand-ins on the user's own computer.
| Subprocessor | What it does for SourceSecure | Information it receives | Where |
|---|---|---|---|
| Google LLC (Google Cloud, Firebase) | Website hosting, database, sign-in, server functions, file storage, logs | Staff email addresses and sign-in records; team, seat and invitation records; catch and pause records (masked); usage counts; firm profile and playbook; server logs (no message text) | Montreal, Canada (northamerica-northeast1) |
| OpenAI, L.L.C. | Writes coaching tips, reply marks, Ask SourceSecure answers, the weekly note, and chat and meeting summaries | Redacted text only, with stand-ins in place of names and numbers; sent with storage switched off | United States |
| Stripe, Inc. | Payments, invoices and subscriptions | Buyer's name, email, card and billing address, entered on Stripe's own checkout page | United States and Canada |
| Resend (Plus Five Five, Inc.) | Delivers sign-in links, invitations and the monthly report email | Recipient email addresses and the email's contents (never text from AI chats) | United States |
Changes to this list
We email every firm's admins at least 30 days before we add or replace a subprocessor. A firm that objects on reasonable privacy grounds may end the affected service and receive a refund of fees prepaid for the period after it ends, as set out in the Data Processing Agreement.
What is not on this list
The AI chat sites themselves (ChatGPT, Claude, Copilot, Gemini and others) are not SourceSecure's subprocessors: your staff use them directly under your firm's own accounts and terms. SourceSecure's job is to reduce what reaches them.
Getting in touch
Email support@sourcesecure.ca. SourceSecure is operated by JOLIVE Labs Inc.