Sub-processors
Last updated 2026-10-13
This page names the companies that process data for Brennick on a law firm’s behalf. The Data Processing Addendum sets the terms they work under.
Brennick uses the service providers below to run the Service. Each receives only what its task needs, is bound by a contract at least as protective as the Data Processing Addendum, and is an independent contractor of Brennick. Providers marked optional receive data only when a firm turns the integration on.
Amazon Web Services, Inc.
- What it does
- Application hosting (ECS, load balancer, logs), file storage (S3), encryption keys (KMS), OCR of scanned pages (Textract), client portal sign-in (Cognito), transactional email (SES)
- Data it receives
- All data in transit through the application; uploaded files at rest; page images of scanned pages; portal clients’ sign-in email; recipient email address and notification text (no case content)
- Location
- United States (us-west-2)
Neon (Databricks, Inc.)
- What it does
- Database
- Data it receives
- All Customer Data at rest in the database
- Location
- United States (AWS us-west-2)
Clerk Inc.
- What it does
- Firm staff sign-in and organization membership
- Data it receives
- Firm users’ names, email addresses and session metadata, never client data
- Location
- United States
Anthropic PBC
- What it does
- AI analysis, drafting and review (Claude API)
- Data it receives
- Sanitized document text and case facts sent for each processing step
- Location
- United States
Perplexity AI, Inc.
- What it does
- State-law currency research
- Data it receives
- Jurisdiction and case-type questions only; no client data
- Location
- United States
Stripe, Inc.
- What it does
- Subscription billing and payments
- Data it receives
- Billing contact, payment method, invoices
- Location
- United States
Twilio Inc.
- What it does
- SMS notifications
- Data it receives
- Recipient phone number and notification text (no case content)
- Location
- United States
BoldSign (Syncfusion, Inc.)
- What it does
- E-signature for retainers and authorizations
- Data it receives
- Signer name and email, the document sent for signature
- Location
- United States
Cloudflare, Inc. (Turnstile)
- What it does
- Bot protection on the public intake page
- Data it receives
- Browser signals and IP address of intake visitors
- Location
- Global edge network
Upstash, Inc.
- What it does
- Rate limiting
- Data it receives
- Request counters keyed by a SHA-256 hash of the visitor’s IP address and route (pseudonymous, not anonymous)
- Location
- United States
Themis Solutions Inc. (Clio)
- What it does
- Practice-management sync
- Data it receives
- Client contacts, matters, documents, status notes
- Location
- Per the firm’s Clio region
- Optional
- Only if the firm connects Clio
Google LLC (Calendar)
- What it does
- Deadline calendar sync
- Data it receives
- SOL and follow-up dates, client initial and surname
- Location
- United States
- Optional
- Only if the firm connects Google Calendar
Microsoft Corporation (Outlook calendar)
- What it does
- Deadline calendar sync
- Data it receives
- SOL and follow-up dates, client initial and surname
- Location
- Per the firm’s Microsoft account
- Optional
- Only if the firm connects an Outlook or Microsoft 365 calendar
Changes to this list
Brennick emails every firm’s administrators at least 30 days before adding or replacing a sub-processor that processes clients’ data, and a firm may object under section 4 of the Data Processing Addendum.
Questions about this list go to privacy@brennick.ai.