These are the third parties RocSite uses to deliver the service, and exactly what each one handles. We keep this list short on purpose.
| Subprocessor | What it does | What it processes |
|---|---|---|
| Cloudflare | Network delivery, TLS, DNS, access control, and object storage (R2) for uploaded files. | Network metadata for every request (IP address, user agent, requested URL), and the content of files uploaded to a workspace. |
| Stripe | Payment processing for subscriptions. | Billing contact details and payment information. Card numbers go directly to Stripe; RocSite never receives or stores them. |
| Resend | Transactional email: workspace invitations, sign-in and account mail, receipts. | Recipient email address and the contents of that message. Not used for workspace content generally. |
Assistant, search, transcription and embedding features are served by models running on infrastructure operated for RocSite, not by a third-party AI provider. Your workspace content is not sent to an external model vendor to provide these features. This is a deliberate architectural commitment, not an incidental detail. If it ever changes for a specific feature, that provider will be added to this list and customers will be notified under the 30-day notice in the DPA before it takes effect.
We give at least 30 days' notice before adding or replacing a subprocessor. Customers may object on reasonable data protection grounds as described in the DPA. To be notified of changes, email support@rocsite.com and ask to be added to the subprocessor notice list.
RocSite · support@rocsite.com