Subprocessors
What this document is:
A list of service providers that may process limited personal data on behalf of GOlegal when operating the Clawscan platform.
Why this matters:
Organizations deploying Clawscan often require transparency regarding the third-party service providers involved in operating the platform.
Who should read this:
Legal teams, procurement teams, data protection officers (DPOs), and security reviewers.
When to use this:
Vendor onboarding, contractual reviews, and data protection assessments.
Overview
GOlegal may rely on a limited number of external service providers to support the operation of the Clawscan platform.
These providers may process limited operational or administrative data, such as account information, billing data, or platform telemetry.
Clawscan is designed so that communication content analyzed by the system remains within the client’s Microsoft 365 and Azure environment. As a result, subprocessors used by GOlegal do not receive or process communication content analyzed by the Clawscan Engine.
See:
Infrastructure providers
These providers support the technical operation of the Clawscan control plane.
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting of the Clawscan platform infrastructure | EU |
| Microsoft Dataverse | Platform data storage and application services | EU |
These services may process operational data such as:
- platform telemetry
- diagnostic information
- account-related data
They do not process communication content analyzed within the client tenant.
Billing and financial services
The following providers may process limited personal or business information necessary for subscription management and invoicing.
| Subprocessor | Purpose |
|---|---|
| Chargebee | Subscription and billing management |
| Stripe | Payment processing |
| Invopop | Electronic invoicing infrastructure |
| Peppol network providers | Electronic invoice delivery where applicable |
These services may process:
- billing contact information
- company identification details
- payment-related information
They do not access platform telemetry or communication analysis data.
Customer interaction services
Certain services may be used to facilitate contact with prospective or existing customers.
| Subprocessor | Purpose |
|---|---|
| Typeform | Customer contact forms and onboarding requests |
Typeform may process information submitted voluntarily through forms, such as:
- name
- email address
- organization
- contact requests
This data is used solely for responding to inquiries or initiating onboarding processes.
Infrastructure controlled by the client
Clawscan operates partly within the client’s own Microsoft 365 and Azure environment.
Components located within the client tenant may include:
- Microsoft Exchange Online
- Azure OpenAI services
- the Clawscan Engine container
These components operate under the control of the client organization, not GOlegal.
Service providers used within the client tenant are therefore selected and controlled by the client organization, not by GOlegal.
See:
Subprocessor management
GOlegal selects subprocessors based on criteria such as:
- security and reliability
- data protection commitments
- contractual safeguards (including data processing agreements)
Where relevant, GOlegal relies on industry-standard providers with established security and compliance frameworks.
Subprocessors are contractually required to process personal data only to the extent necessary to support the Clawscan platform and in accordance with applicable data protection obligations.
Updates to this list
This list may be updated periodically to reflect changes in the service providers used to operate the Clawscan platform.
GOlegal may update its subprocessor ecosystem as part of its operational, security, or service delivery practices.
Any notification or approval obligations relating to such changes are governed by the applicable contractual arrangements between GOlegal and the client organization.