Subprocessor List

Last updated: July 13, 2026

BeyondWill uses a set of external vendors to operate and deliver our platform. This page lists the subprocessors that may process customer data as part of our services, the purpose each one serves, and the categories of data they process on our behalf.

We enter into data protection agreements with each subprocessor and remain liable for their processing. BeyondWill will provide at least 10 days’ notice before authorizing any new subprocessor. Customers who have signed a Data Processing Agreement with BeyondWill may object to the addition of a new subprocessor by providing written notice within 7 days.

Infrastructure and storage

Subprocessor	Purpose	Data categories processed
Google Cloud Platform	Cloud hosting, application compute, managed database, secrets, and logging	All customer data processed and stored by the platform
Google Cloud Storage	Document, media, and file storage	Uploaded documents, generated files, and media

Authentication and security

Subprocessor	Purpose	Data categories processed
Auth0 by Okta	Identity and access management, sign-in and sign-up	Name, email address, and authentication metadata
Cloudflare	DNS, TLS termination, web application firewall, DDoS protection, rate limiting, and bot mitigation (Turnstile)	IP address, request metadata, and device and browser signals

AI and document processing

Subprocessor	Purpose	Data categories processed
Anthropic	AI-assisted document data extraction and in-product assistance	Contents of uploaded documents, which may include names, contact details, government identifiers, and financial and estate information
OpenAI	AI-assisted features and data extraction	Contents of uploaded documents and related inputs, which may include names, contact details, government identifiers, and financial and estate information

Payments

Subprocessor	Purpose	Data categories processed
Stripe	Payment and subscription processing	Name, email address, billing details, and payment information

Communications

Subprocessor	Purpose	Data categories processed
SendGrid	Transactional and notification email	Name, email address, and message content

Analytics and product experience

Subprocessor	Purpose	Data categories processed
Google Analytics	Website and product usage analytics	Usage data, device and browser data, and IP address
Google Tag Manager	Deployment and management of analytics and marketing tags	Usage and event data
Microsoft Clarity	Session and behavior analytics	Usage data, session interactions, and IP address
Mixpanel	Product usage and event analytics	User identifiers and product event data
Product Fruits	In-product onboarding and guidance	User identifiers and product usage data
Google Places (Google Maps Platform)	Address autocomplete and validation	Address input data

Engineering and observability

Subprocessor	Purpose	Data categories processed
Sentry	Application error and performance monitoring	Diagnostic data, which may incidentally include personal data contained in error context
GitHub Actions	Build and deployment automation	Source code and build artifacts; no customer personal data in normal operation

Questions

If you have questions about our subprocessors or data processing practices, please contact us at privacy@beyondwill.co.