Skip to content
bock

Legal

Subprocessors

Draft, last updated 2026-10-31

The English version is the original. The Swedish text is a translation.

These are the companies that process personal data for us to run Bock. We add a provider here before we start using it. How we handle data is in the privacy policy.

1.Subprocessors

  • SupabaseEU: AWS eu-north-1 (Stockholm, Sweden)

    Database, sign-in, file storage and server functions.

    Sees: Everything in your workspace and your account.

  • CloudflareGlobal network

    Serves the web app and the AI connector endpoint (/mcp), protects against attacks.

    Sees: Requests passing through, including IP addresses.

  • AnthropicUSA

    AI models behind Bock’s own AI features (morning brief, ⌘K, smart capture, Ask Bock, agents).

    Sees: The parts of your workspace a request needs.

  • OpenAIUSA

    Transcribing meeting recordings.

    Sees: Meeting audio.

  • ResendUSA

    Sending notification emails (when email notifications are on).

    Sees: Email address, the notification’s text.

  • GitHub (Microsoft)USA

    Encrypted nightly backups of the database, kept 90 days.

    Sees: An encrypted copy of the database.

Transfers to providers in the USA rely on the EU–US Data Privacy Framework or the EU’s standard contractual clauses. Anthropic, Supabase, Resend, Cloudflare and GitHub each have a data processing agreement as part of their standard terms, with the standard contractual clauses; Resend, Cloudflare and GitHub also state that they are certified under the framework. We have signed OpenAI’s data processing agreement.

Bock can also send AI requests through AWS Bedrock (EU) or Google Cloud Vertex AI. Neither is in use today; we will add them here before either is turned on.

2.Services you choose to connect

These see data because you or your organisation connect them, and their own terms apply. They aren’t our subprocessors.

  • Google: Sign-in with Google, and Calendar and Drive if you connect them.
  • LinkedIn: Publishing the posts a person approves, if your organisation connects a channel.
  • Your own AI assistant: Claude or another assistant someone in your organisation connects to Bock through the connector.
  • Your browser’s push service: Google, Apple, Mozilla or Microsoft, if you turn on push notifications.

3.Changes

When this list changes we update the date at the top. Want to hear about changes before they happen? Write to [email protected].