Subprocessors
Subprocessors
The third-party services we rely on to run A11y Audit, what each one processes, and where it runs.
A subprocessor is a third party that processes customer data on our behalf in order to deliver the platform. We publish the full list rather than supplying it on request, because procurement reviews ask for it every time and a published list is one fewer thing to wait on.
Microsoft Azure
- Purpose
- Application hosting, database, file storage for generated evidence, and outbound email delivery through Azure Communication Services.
- Data processed
- All platform data: account and contact records, crawl and scan results, documents retrieved for scanning, generated reports and signed evidence artifacts, and the content of email we send on your behalf.
- Location
- United States (East US)
Stripe
- Purpose
- Payment processing and subscription billing.
- Data processed
- Billing contact name and email, plan and subscription status, and payment details. Card numbers are handled by Stripe and never reach our systems.
- Location
- United States
Google Workspace
- Purpose
- Business email and correspondence.
- Data processed
- The content of email exchanged with us, including support requests and correspondence about accessibility grievances.
- Location
- United States
Anthropic
- Status
- Not currently enabled. The hosted platform runs without an Anthropic API key, so no data reaches Anthropic from any of these features today.
- Purpose
- Three optional AI-assisted features, each producing a draft for a person to review and none of them deciding anything: triage of an incoming accessibility grievance, a first draft of an undue-burden justification under §35.164, and suggested remediation steps on a QA task.
- Data processed
- Only the item being worked on, and it differs by feature. Grievance triage sends the text of the submission. An undue-burden draft sends your organization name, the year, document and open-task counts, and population. Remediation suggestions send the failing checks on one scan — check identifiers, descriptions, severities and WCAG levels — together with the URL of the document concerned. No account records, no credentials, and no signed evidence artifacts.
- Location
- United States
The AI features, and why they are currently off
All three are optional and controlled by a single configuration key, and that key is not set on the hosted platform. We listed Anthropic above anyway, because the integration exists in the product and a procurement reviewer is better served by being told it is off than by finding it later.
None of the three decides anything. Each produces a draft that a person reviews, edits, and is responsible for. Grievance triage suggests a category and urgency; the determination is still made by whoever answers the grievance. An undue-burden justification is a legal position your organization takes, so a generated draft is a starting point and never the filing. Remediation suggestions are additional to, not instead of, the remediation guidance every scan finding already carries from the check catalogs — which is part of why running without the key costs so little.
If your policy permits third-party AI processing and you want these features, tell us. If it does not, there is nothing to turn off.
Changes to this list
We will update this page before a new subprocessor begins processing customer data. If you have a data processing agreement with us that requires advance notice of changes, that agreement governs and we will notify you directly as well.
Questions
Email privacy@a11yaudit.app with any question about this list or about a data processing agreement.
Last updated: October 2026